Browse All CVEs
10,058 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-21024 |
medium | 6.3 | 0.0009 | 2026-10-29 | Improper privilege management in Samsung System Support Service prior to version 8.0.8.0 a | |
CVE-2024-47091 |
medium | 5.2 | 0.0012 | 2026-10-29 | Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p | |
CVE-2026-41051 |
medium | 5.1 | 0.0008 | 2026-10-29 | csync2 uses insecure temporary directories when compiled with C99 or later, allowing for T | |
CVE-2026-44931 |
medium | 5.1 | 0.0015 | 2026-10-29 | The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/ma | |
CVE-2026-25107 |
medium | 6.9 | 0.0012 | 2026-10-29 | ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating | |
CVE-2026-42948 |
medium | 4.8 | 0.0016 | 2026-10-29 | Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devic | |
CVE-2026-42950 |
medium | 5.1 | 0.0021 | 2026-10-29 | ELECOM wireless LAN access point devices do not check if language parameter has an appropr | |
CVE-2026-42961 |
medium | 5.1 | 0.0019 | 2026-10-29 | ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with ina | |
CVE-2026-8463 |
medium | 5.3 | 0.0033 | 2026-10-29 | Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read | |
CVE-2024-51394 |
medium | 5.5 | 0.0010 | 2026-10-29 | Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37 | |
CVE-2024-51395 |
medium | 6.2 | 0.0011 | 2026-10-29 | Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37 | |
CVE-2025-29338 |
medium | 5.6 | 0.0018 | 2026-10-29 | NXP moal.ko Wi-Fi driver 5.1.7.10 FW version from v17.92.1.p149.43 To v17.92.1.p149.157 wa | |
CVE-2026-24464 |
medium | 6.9 | 0.0089 | 2026-10-29 | When running in Appliance mode, a directory traversal vulnerability exists in an undisclos | |
CVE-2026-28758 |
medium | 6.7 | 0.0008 | 2026-10-29 | When BIG-IP DNS is provisioned, a vulnerability exists in the gtm_add and bigip_add iContr | |
CVE-2026-34019 |
medium | 6.3 | 0.0029 | 2026-10-29 | When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing | |
CVE-2026-40435 |
medium | 6.9 | 0.0023 | 2026-10-29 | When configured, IP-based access restrictions for httpd do not cover all endpoints, which | |
CVE-2026-40460 |
medium | 6.9 | 0.0037 | 2026-10-29 | When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an atta | |
CVE-2026-40701 |
medium | 6.3 | 0.0069 | 2026-10-29 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module wh | |
CVE-2026-40703 |
medium | 5.3 | 0.0010 | 2026-10-29 | A cross-site request forgery (CSRF) vulnerability exists in the dashboard of the BIG-IP Co | |
CVE-2026-41954 |
medium | 6.9 | 0.0029 | 2026-10-29 | Sensitive information disclosure vulnerability exists in the undisclosed iControl REST end | |
CVE-2026-42058 |
medium | 5.3 | 0.0019 | 2026-10-29 | An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an in | |
CVE-2026-42063 |
medium | 6.9 | 0.0029 | 2026-10-29 | A vulnerability exists in iControl SOAP where an authenticated attacker with the Resource | |
CVE-2026-42408 |
medium | 6.7 | 0.0008 | 2026-10-29 | When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell (tmsh) | |
CVE-2026-42780 |
medium | 6.9 | 0.0089 | 2026-10-29 | A directory traversal vulnerability exists in BIG-IP SSL Orchestrator that allows an authe | |
CVE-2026-42926 |
medium | 6.3 | 0.0035 | 2026-10-29 | When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version | |
CVE-2026-42934 |
medium | 6.3 | 0.0073 | 2026-10-29 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module modul | |
CVE-2026-44455 |
medium | 6.1 | 0.0014 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. Prio | |
CVE-2026-44456 |
medium | 6.5 | 0.0022 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. Prio | |
CVE-2026-44457 |
medium | 5.3 | 0.0020 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. Prio | |
CVE-2026-44458 |
medium | 4.3 | 0.0020 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. Prio | |
CVE-2026-44572 |
medium | 5.9 | 0.0028 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 12.2.0 to befo | |
CVE-2026-44664 |
medium | 6.1 | 0.0019 | 2026-10-29 | fast-xml-builder builds XML from JSON. In 1.1.5, the fix for CVE-2026-41650 in fast-xml-pa | |
CVE-2026-44665 |
medium | 6.1 | 0.0024 | 2026-10-29 | fast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in at | |
CVE-2026-8367 |
medium | 5.3 | 0.0013 | 2026-10-29 | aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attack | |
CVE-2024-48519 |
medium | 6.2 | 0.0011 | 2026-10-29 | Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081 | |
CVE-2026-2695 |
medium | 6.3 | 0.0020 | 2026-10-29 | A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (f | |
CVE-2026-44576 |
medium | 5.4 | 0.0029 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 14.2.0 to befo | |
CVE-2026-44002 |
medium | 5.8 | 0.0024 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's CallSite wrapper clas | |
CVE-2026-44003 |
medium | 5.8 | 0.0025 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's code transformer has | |
CVE-2026-44580 |
medium | 6.1 | 0.0021 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 13.0.0 to befo | |
CVE-2026-44581 |
medium | 4.7 | 0.0022 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 13.4.0 to befo | |
CVE-2026-0235 |
medium | 5.8 | 0.0011 | 2026-10-29 | A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally aut | |
CVE-2026-0239 |
medium | 4.9 | 0.0017 | 2026-10-29 | An information disclosure vulnerability in the Chronosphere Chronocollector enables an una | |
CVE-2026-0240 |
medium | 4.5 | 0.0024 | 2026-10-29 | An information disclosure vulnerability in Trust Protection Foundation enables an authenti | |
CVE-2026-0241 |
medium | 5.1 | 0.0034 | 2026-10-29 | Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to | |
CVE-2026-0242 |
medium | 6.1 | 0.0025 | 2026-10-29 | A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attac | |
CVE-2026-0244 |
medium | 5.2 | 0.0022 | 2026-10-29 | An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN I | |
CVE-2026-0245 |
medium | 4.3 | 0.0014 | 2026-10-29 | Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user | |
CVE-2026-0246 |
medium | 5.9 | 0.0015 | 2026-10-29 | A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Acc | |
CVE-2026-0247 |
medium | 5.9 | 0.0015 | 2026-10-29 | Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Acce |