Browse All CVEs
13,430 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-55973 |
high | 7.5 | 0.0028 | 2026-10-29 | In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' i | |
CVE-2026-11331 |
high | 7.5 | 0.0043 | 2026-10-29 | An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies c | |
CVE-2026-11605 |
high | 7.5 | 0.0067 | 2026-10-29 | The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND a | |
CVE-2026-11622 |
high | 7.5 | 0.0054 | 2026-10-29 | A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-sign | |
CVE-2026-11721 |
high | 7.5 | 0.0040 | 2026-10-29 | It is possible for an attacker's zone to respond to a query with an RRSIG that has a small | |
CVE-2026-12617 |
high | 7.5 | 0.0052 | 2026-10-29 | The issue is unexpected program termination based on ordering and/or specific content in r | |
CVE-2026-13204 |
high | 7.5 | 0.0052 | 2026-10-29 | If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, a | |
CVE-2026-13321 |
high | 8.6 | 0.0021 | 2026-10-29 | The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field p | |
CVE-2026-14985 |
high | 7.8 | 0.0017 | 2026-10-29 | The Analog Way Picturall Quad Compact Mark II version 3.5.8, contains a local privilege es | |
CVE-2026-48029 |
high | 7.1 | 0.0036 | 2026-10-29 | libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 | |
CVE-2026-40712 |
high | 7.2 | 0.0050 | 2026-10-29 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input V | |
CVE-2026-40714 |
high | 7.2 | 0.0050 | 2026-10-29 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input V | |
CVE-2026-46737 |
high | 7.2 | 0.0063 | 2026-10-29 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input V | |
CVE-2026-46738 |
high | 7.2 | 0.0050 | 2026-10-29 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input V | |
CVE-2026-49499 |
high | 8.8 | 0.0042 | 2026-10-29 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Inc | |
CVE-2026-64830 |
high | 8.7 | 0.0065 | 2026-10-29 | FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the Vob | |
CVE-2026-64831 |
high | 8.7 | 0.0085 | 2026-10-29 | FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vu | |
CVE-2026-65013 |
high | 8.7 | 0.0052 | 2026-10-29 | Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorizati | |
CVE-2026-64832 |
high | 8.7 | 0.0034 | 2026-10-29 | FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC | |
CVE-2026-64833 |
high | 7.1 | 0.0040 | 2026-10-29 | FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/P | |
CVE-2026-64834 |
high | 8.7 | 0.0073 | 2026-10-29 | FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF | |
CVE-2026-64835 |
high | 8.7 | 0.0050 | 2026-10-29 | FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in | |
CVE-2026-22049 |
high | 8.7 | 0.0053 | 2026-10-29 | ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configure | |
CVE-2026-13055 |
high | 7.1 | 0.0040 | 2026-10-29 | The `$_internalIndexKey` aggregation expression can be used by any authenticated user to c | |
CVE-2026-13056 |
high | 7.1 | 0.0040 | 2026-10-29 | Using expressions that generate large arrays it is possible to craft a query that creates | |
CVE-2026-13058 |
high | 7.1 | 0.0040 | 2026-10-29 | An authenticated user with basic write privileges can cause the mongod process to terminat | |
CVE-2026-13059 |
high | 8.6 | 0.0038 | 2026-10-29 | An authenticated user with low privileges may be able to perform unauthorized reads and wr | |
CVE-2026-13060 |
high | 7.1 | 0.0043 | 2026-10-29 | An authenticated user with limited read privileges may be able to access documents from co | |
CVE-2026-13062 |
high | 7.1 | 0.0019 | 2026-10-29 | An authenticated user with write privileges on a Queryable Encryption-enabled collection m | |
CVE-2026-13064 |
high | 7.1 | 0.0045 | 2026-10-29 | Certain query operations involving deeply nested $jsonSchema constructs can trigger dispro | |
CVE-2026-13065 |
high | 7.1 | 0.0050 | 2026-10-29 | A user with read-only privileges is able to craft an aggregation pipeline using the $linea | |
CVE-2026-13066 |
high | 7.1 | 0.0037 | 2026-10-29 | Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side | |
CVE-2026-13067 |
high | 7.2 | 0.0010 | 2026-10-29 | When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 cl | |
CVE-2026-13069 |
high | 7.1 | 0.0029 | 2026-10-29 | An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a | |
CVE-2026-13071 |
high | 7.1 | 0.0042 | 2026-10-29 | An authenticated user with read access can cause the mongod process to be terminated throu | |
CVE-2026-13075 |
high | 7.1 | 0.0042 | 2026-10-29 | An authenticated user can cause the mongod process to be terminated by the operating syste | |
CVE-2026-13076 |
high | 7.1 | 0.0042 | 2026-10-29 | An authenticated user can cause a {{mongod}} process to be terminated by the operating sys | |
CVE-2026-13077 |
high | 7.1 | 0.0042 | 2026-10-29 | A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trig | |
CVE-2026-14881 |
high | 8.4 | 0.0021 | 2026-10-29 | When importing connections in Compass it is possible to override some connection options t | |
CVE-2026-14899 |
high | 7.5 | 0.0047 | 2026-10-29 | The code to parse MIME headers for display when forwarding a message (if the setting to vi | |
CVE-2026-9737 |
high | 7.1 | 0.0042 | 2026-10-29 | During query planning when reading the sort pattern in raw BSONObj form, in some places we | |
CVE-2026-13089 |
high | 7.5 | 0.0037 | 2026-10-29 | OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass v | |
CVE-2026-63265 |
high | 8.0 | 0.0018 | 2026-10-29 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in | |
CVE-2026-63280 |
high | 8.8 | 0.0020 | 2026-10-29 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in | |
CVE-2026-63683 |
high | 7.5 | 0.0039 | 2026-10-29 | Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs cond | |
CVE-2026-63684 |
high | 8.8 | 0.0020 | 2026-10-29 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in | |
CVE-2026-63685 |
high | 8.8 | 0.0042 | 2026-10-29 | Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Admin | |
CVE-2026-64791 |
high | 8.8 | 0.0020 | 2026-10-29 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in | |
CVE-2026-64792 |
high | 7.5 | 0.0042 | 2026-10-29 | Joomla Extension - regularlabs.com - disclosure of restricted content via search index in | |
CVE-2026-64797 |
high | 7.5 | 0.0035 | 2026-10-29 | Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP |