Browse All CVEs
13,355 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-45813 |
high | 8.8 | 0.0053 | 2026-10-29 | Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE | |
CVE-2026-45815 |
high | 7.5 | 0.0103 | 2026-10-29 | Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple | |
CVE-2026-45816 |
high | 7.5 | 0.0103 | 2026-10-29 | NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. | |
CVE-2026-66142 |
high | 7.5 | 0.0074 | 2026-10-29 | Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack poli | |
CVE-2026-66143 |
high | 7.5 | 0.0085 | 2026-10-29 | It is possible to bypass the maximum number of normalized policy alternatives that was int | |
CVE-2026-66144 |
high | 7.5 | 0.0074 | 2026-10-29 | Although remote policy references are not retrieved during policy normalization, if they a | |
CVE-2026-9765 |
high | 7.1 | 0.0040 | 2026-10-29 | Note: The CVE and blog post don't exist because we determined this is actually a cloud-onl | |
CVE-2026-16800 |
high | 8.8 | 0.0053 | 2026-10-29 | Improper control of generation of code ('Code Injection') in the schedule feature in Devol | |
CVE-2026-16801 |
high | 8.8 | 0.0053 | 2026-10-29 | Improper control of generation of code ('Code Injection') in the variables feature in Devo | |
CVE-2026-55729 |
high | 7.7 | 0.0054 | 2026-10-29 | Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LW | |
CVE-2026-55730 |
high | 8.7 | 0.0061 | 2026-10-29 | Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all | |
CVE-2026-64237 |
high | 7.1 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - val | |
CVE-2026-64239 |
high | 7.8 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-scheme | |
CVE-2026-66027 |
high | 8.7 | 0.0046 | 2026-10-29 | Suna before 0.9.102 contains a broken access control vulnerability in the message queue AP | |
CVE-2026-65623 |
high | 8.7 | 0.0048 | 2026-10-29 | Inefficient Algorithmic Complexity vulnerability in mtrudel bandit allows unauthenticated | |
CVE-2026-65707 |
high | 8.5 | 0.0046 | 2026-10-29 | Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows a | |
CVE-2026-65708 |
high | 8.6 | 0.0039 | 2026-10-29 | sysPass through version 3.2.11 contains an insecure direct object reference vulnerability | |
CVE-2026-65709 |
high | 8.7 | 0.0039 | 2026-10-29 | sysPass through version 3.2.11 contains a missing object-level authorization vulnerability | |
CVE-2026-65710 |
high | 7.1 | 0.0030 | 2026-10-29 | sysPass through version 3.2.11 contains a missing authorization vulnerability that allows | |
CVE-2026-65711 |
high | 8.6 | 0.0204 | 2026-10-29 | sysPass through version 3.2.11 contains an OS command injection vulnerability that allows | |
CVE-2026-48032 |
high | 8.3 | 0.0054 | 2026-10-29 | Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastru | |
CVE-2026-48033 |
high | 8.4 | 0.0048 | 2026-10-29 | Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastru | |
CVE-2026-48034 |
high | 8.5 | 0.0045 | 2026-10-29 | Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastru | |
CVE-2026-48035 |
high | 7.1 | 0.0045 | 2026-10-29 | Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastru | |
CVE-2026-48036 |
high | 8.4 | 0.0051 | 2026-10-29 | Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastru | |
CVE-2026-54342 |
high | 8.1 | 0.0020 | 2026-10-29 | In epa4all, prior to version 2026-05-20, an attacker on the network path between epa4all a | |
CVE-2026-66041 |
high | 7.7 | 0.0049 | 2026-10-29 | FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vul | |
CVE-2026-66374 |
high | 8.1 | 0.0062 | 2026-10-29 | Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow i | |
CVE-2026-64270 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - rejec | |
CVE-2026-64271 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - res | |
CVE-2026-64272 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix t | |
CVE-2026-64273 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound | |
CVE-2026-64274 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp | |
CVE-2026-64276 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 | |
CVE-2026-64277 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 | |
CVE-2026-64304 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validat | |
CVE-2026-64305 |
high | 7.8 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect | |
CVE-2026-64311 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Re | |
CVE-2026-64312 |
high | 7.5 | 0.0050 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - rest | |
CVE-2026-64313 |
high | 8.8 | 0.0036 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix car | |
CVE-2026-64315 |
high | 7.0 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use pr | |
CVE-2026-64438 |
high | 8.8 | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2 | |
CVE-2026-64529 |
high | 7.8 | 0.0018 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove | |
CVE-2026-10681 |
high | 7.0 | 0.0011 | 2026-10-29 | In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/us | |
CVE-2026-63720 |
high | 7.5 | 0.0074 | 2026-10-29 | datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability t | |
CVE-2024-14040 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increas | |
CVE-2026-17496 |
high | 8.1 | 0.0055 | 2026-10-29 | NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true | |
CVE-2026-17497 |
high | 8.3 | 0.0075 | 2026-10-29 | NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bas | |
CVE-2026-57989 |
high | 7.4 | 0.0043 | 2026-10-29 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-57990 |
high | 7.4 | 0.0092 | 2026-10-29 | Files or directories accessible to external parties in Microsoft Edge (Chromium-based) all |