Browse All CVEs
10,021 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-44919 |
medium | 6.5 | 0.0047 | 2026-10-29 | In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop i | |
CVE-2026-45205 |
medium | 5.3 | 0.0047 | 2026-10-29 | Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted conf | |
CVE-2026-43644 |
medium | 5.1 | 0.0019 | 2026-10-29 | podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /ech | |
CVE-2026-6008 |
medium | 6.8 | 0.0022 | 2026-10-29 | Authorization bypass through User-Controlled key vulnerability in Im Park Information Tech | |
CVE-2026-1630 |
medium | 5.1 | 0.0043 | 2026-10-29 | WEBCON BPS is vulnerable to Reflected XSS via one of parameters used by "/openinmobileapp" | |
CVE-2026-21730 |
medium | 5.3 | 0.0021 | 2026-10-29 | Verba is affected by a Stored Cross-Site Scripting (XSS) vulnerability within its login lo | |
CVE-2026-41932 |
medium | 5.3 | 0.0022 | 2026-10-29 | Vvveb before 1.0.8.3 contains a stored cross-site scripting vulnerability in the customer | |
CVE-2026-41933 |
medium | 6.9 | 0.0025 | 2026-10-29 | Vvveb before 1.0.8.3 contains a directory listing information disclosure vulnerability tha | |
CVE-2026-44216 |
medium | 5.9 | 0.0032 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. From 30.0.0 to 36.0.8, 43.0.2, and 44.0.1, Wasmtime | |
CVE-2026-44308 |
medium | 6.3 | 0.0018 | 2026-10-29 | Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applica | |
CVE-2026-44371 |
medium | 5.3 | 0.0026 | 2026-10-29 | Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, | |
CVE-2026-44374 |
medium | 4.3 | 0.0017 | 2026-10-29 | Backstage is an open framework for building developer portals. Prior to 0.6.11, the unproc | |
CVE-2026-42159 |
medium | 5.3 | 0.0019 | 2026-10-29 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investi | |
CVE-2026-20209 |
medium | 5.4 | 0.0019 | 2026-10-29 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, c | |
CVE-2026-20210 |
medium | 5.4 | 0.0019 | 2026-10-29 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, c | |
CVE-2026-44312 |
medium | 5.8 | 0.0015 | 2026-10-29 | css_parser is a Ruby CSS parser. Prior to 2.1.0 and 1.22.0, the CSS Parser gem does not va | |
CVE-2026-44514 |
medium | 6.5 | 0.0017 | 2026-10-29 | Kubetail is a real-time logging dashboard for Kubernetes. Prior to 0.14.0, Kubetail's dash | |
CVE-2026-45448 |
medium | 4.3 | 0.0017 | 2026-10-29 | CWE-601 URL redirection to untrusted site ('open redirect') | |
CVE-2026-42598 |
medium | 6.9 | 0.0032 | 2026-10-29 | Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and T | |
CVE-2026-42897 |
medium | 6.1 | 0.7066 | 2026-10-29 | KEV | Microsoft Exchange Server contains a cross-site scripting vulnerability during web page ge |
CVE-2026-44520 |
medium | 5.7 | 0.0019 | 2026-10-29 | Docling-Graph turns documents into validated Pydantic objects, then builds a directed know | |
CVE-2026-46469 |
medium | 5.5 | 0.0010 | 2026-10-29 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audi | |
CVE-2026-6332 |
medium | 6.8 | 0.0013 | 2026-10-29 | CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause | |
CVE-2026-22707 |
medium | 5.3 | 0.0019 | 2026-10-29 | Strapi is an open source headless content management system. In Strapi versions prior to 5 | |
CVE-2026-27680 |
medium | 4.3 | 0.0017 | 2026-10-29 | Due to improper input handling under certain conditions, SAP NetWeaver Application Server | |
CVE-2026-24000 |
medium | 6.9 | 0.0043 | 2026-10-29 | Fleet is open source device management software. Prior to version 4.80.1, Fleet trusted cl | |
CVE-2026-26191 |
medium | 6.0 | 0.0077 | 2026-10-29 | Fleet is open source device management software. Prior to version 4.81.0, a vulnerability | |
CVE-2026-43996 |
medium | 5.5 | 0.0018 | 2026-10-29 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image f | |
CVE-2026-46356 |
medium | 6.9 | 0.0028 | 2026-10-29 | Fleet is open source device management software. Prior to version 4.80.1, a vulnerability | |
CVE-2026-8516 |
medium | 5.3 | 0.0022 | 2026-10-29 | Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0 | |
CVE-2026-8528 |
medium | 4.3 | 0.0020 | 2026-10-29 | Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148. | |
CVE-2026-8535 |
medium | 5.3 | 0.0019 | 2026-10-29 | Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 | |
CVE-2026-8537 |
medium | 4.3 | 0.0018 | 2026-10-29 | Insufficient policy enforcement in ViewTransitions in Google Chrome prior to 148.0.7778.16 | |
CVE-2026-8538 |
medium | 5.3 | 0.0019 | 2026-10-29 | Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168 | |
CVE-2026-8539 |
medium | 5.4 | 0.0016 | 2026-10-29 | Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allow | |
CVE-2026-8541 |
medium | 5.3 | 0.0021 | 2026-10-29 | Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacke | |
CVE-2026-8543 |
medium | 5.3 | 0.0026 | 2026-10-29 | Out of bounds read in FileSystem in Google Chrome on Mac prior to 148.0.7778.168 allowed a | |
CVE-2026-8546 |
medium | 5.3 | 0.0021 | 2026-10-29 | Out of bounds read in GPU in Google Chrome on Mac and Windows prior to 148.0.7778.168 allo | |
CVE-2026-8550 |
medium | 6.5 | 0.0023 | 2026-10-29 | Use after free in Google Lens in Google Chrome prior to 148.0.7778.168 allowed a remote at | |
CVE-2026-8552 |
medium | 4.3 | 0.0019 | 2026-10-29 | Heap buffer overflow in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a | |
CVE-2026-8559 |
medium | 4.3 | 0.0018 | 2026-10-29 | Integer overflow in Internationalization in Google Chrome on Windows prior to 148.0.7778.1 | |
CVE-2026-8560 |
medium | 4.3 | 0.0025 | 2026-10-29 | Heap buffer overflow in SwiftShader in Google Chrome on Mac and iOS prior to 148.0.7778.16 | |
CVE-2026-8561 |
medium | 5.4 | 0.0018 | 2026-10-29 | Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a rem | |
CVE-2026-8562 |
medium | 4.3 | 0.0019 | 2026-10-29 | Side-channel information leakage in Navigation in Google Chrome prior to 148.0.7778.168 al | |
CVE-2026-8563 |
medium | 4.3 | 0.0018 | 2026-10-29 | Insufficient policy enforcement in IFrame Sandbox in Google Chrome on Windows prior to 148 | |
CVE-2026-8564 |
medium | 4.2 | 0.0016 | 2026-10-29 | Incorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778 | |
CVE-2026-8565 |
medium | 4.7 | 0.0013 | 2026-10-29 | Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 | |
CVE-2026-8566 |
medium | 4.3 | 0.0018 | 2026-10-29 | Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.777 | |
CVE-2026-8567 |
medium | 4.3 | 0.0018 | 2026-10-29 | Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a re | |
CVE-2026-8570 |
medium | 6.5 | 0.0025 | 2026-10-29 | Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to |