Browse All CVEs
9,549 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-35247 |
medium | 6.0 | 0.0012 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-35248 |
medium | 5.0 | 0.0010 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-35252 |
medium | 6.4 | 0.0016 | 2026-10-29 | Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (componen | |
CVE-2026-40923 |
medium | 5.4 | 0.0022 | 2026-10-29 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. | |
CVE-2026-40924 |
medium | 6.5 | 0.0032 | 2026-10-29 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. | |
CVE-2026-6796 |
medium | 5.3 | 0.0015 | 2026-10-29 | A vulnerability was determined in Sanluan PublicCMS up to 6.202506.d. Affected is the func | |
CVE-2026-6797 |
medium | 5.3 | 0.0027 | 2026-10-29 | A vulnerability was identified in Sanluan PublicCMS up to 6.202506.d. Affected by this vul | |
CVE-2026-1354 |
medium | 5.9 | 0.0013 | 2026-10-29 | Zero Motorcycles firmware versions 44 and prior enable an attacker to forcibly pair a dev | |
CVE-2026-40939 |
medium | 6.8 | 0.0015 | 2026-10-29 | The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN | |
CVE-2026-40942 |
medium | 6.3 | 0.0029 | 2026-10-29 | The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN | |
CVE-2026-41527 |
medium | 6.9 | 0.0011 | 2026-10-29 | KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a K | |
CVE-2026-6829 |
medium | 5.3 | 0.0026 | 2026-10-29 | nesquena hermes-webui contains a trust-boundary failure vulnerability that allows authenti | |
CVE-2026-6830 |
medium | 4.8 | 0.0011 | 2026-10-29 | nesquena hermes-webui contains an environment variable leakage vulnerability where profile | |
CVE-2026-3307 |
medium | 5.3 | 0.0027 | 2026-10-29 | An authorization bypass vulnerability was identified in GitHub Enterprise Server that allo | |
CVE-2026-40928 |
medium | 5.4 | 0.0011 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, multiple AVideo | |
CVE-2026-40929 |
medium | 5.4 | 0.0011 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/comment | |
CVE-2026-40935 |
medium | 5.3 | 0.0022 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/getCapt | |
CVE-2026-41055 |
medium | 5.3 | 0.0038 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, an incomplete SS | |
CVE-2026-41060 |
medium | 6.5 | 0.0030 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `isSSRFSafeU | |
CVE-2026-41061 |
medium | 5.4 | 0.0017 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `isValidDura | |
CVE-2026-41062 |
medium | 6.5 | 0.0072 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the directory tr | |
CVE-2026-41063 |
medium | 5.4 | 0.0022 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, an incomplete XS | |
CVE-2026-5512 |
medium | 5.3 | 0.0030 | 2026-10-29 | An improper authorization vulnerability was identified in GitHub Enterprise Server that al | |
CVE-2026-40343 |
medium | 6.9 | 0.0863 | 2026-10-29 | free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5 | |
CVE-2026-41128 |
medium | 5.3 | 0.0025 | 2026-10-29 | Craft CMS is a content management system (CMS). In versions 5.6.0 through 5.9.14, the `act | |
CVE-2026-41129 |
medium | 5.5 | 0.0027 | 2026-10-29 | Craft CMS is a content management system (CMS). Versions on the 4.x branch through 4.17.8 | |
CVE-2026-41130 |
medium | 5.5 | 0.0033 | 2026-10-29 | Craft CMS is a content management system (CMS). In versions on the 4.x branch through 4.17 | |
CVE-2026-41136 |
medium | 5.5 | 0.0028 | 2026-10-29 | free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-s | |
CVE-2026-41457 |
medium | 6.9 | 0.0027 | 2026-10-29 | OwnTone Server versions 28.4 through 29.0 contain a SQL injection vulnerability in DAAP qu | |
CVE-2026-6416 |
medium | 4.9 | 0.0026 | 2026-10-29 | Tanium addressed an uncontrolled resource consumption vulnerability in Interact. | |
CVE-2026-6835 |
medium | 5.1 | 0.0021 | 2026-10-29 | The a+HCM developed by aEnrich has an Arbitrary File Upload vulnerability, allowing unauth | |
CVE-2026-40451 |
medium | 5.1 | 0.0017 | 2026-10-29 | DeepL Chrome browser extension versions from v1.22.0 to v.1.23.0 contain a cross-site scri | |
CVE-2026-22748 |
medium | 6.5 | 0.0020 | 2026-10-29 | Vulnerability in Spring Spring Security. When an application configures JWT decoding with | |
CVE-2026-40448 |
medium | 5.3 | 0.0012 | 2026-10-29 | Potential Integer overflow in tensor allocation size calculation could lead to insufficien | |
CVE-2026-40449 |
medium | 6.6 | 0.0014 | 2026-10-29 | Integer overflow in buffer size calculation could result in out of bounds memory access wh | |
CVE-2026-40450 |
medium | 6.6 | 0.0014 | 2026-10-29 | Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could c | |
CVE-2026-41664 |
medium | 6.6 | 0.0010 | 2026-10-29 | Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to | |
CVE-2026-41665 |
medium | 6.1 | 0.0014 | 2026-10-29 | Integer overflow in scratch buffer initialization size calculation in Samsung Open Source | |
CVE-2026-41666 |
medium | 6.6 | 0.0014 | 2026-10-29 | Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to | |
CVE-2026-41667 |
medium | 6.6 | 0.0016 | 2026-10-29 | Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could | |
CVE-2026-6839 |
medium | 6.6 | 0.0010 | 2026-10-29 | Improper validation of STRING tensor offsets could allows malformed string metadata to tri | |
CVE-2026-6840 |
medium | 5.5 | 0.0010 | 2026-10-29 | Missing bounds validation for operator could allow out of range operator-code lookup duri | |
CVE-2026-6843 |
medium | 5.5 | 0.0011 | 2026-10-29 | A flaw was found in nano. A local user could exploit a format string vulnerability in the | |
CVE-2026-6844 |
medium | 5.5 | 0.0010 | 2026-10-29 | A flaw was found in the `readelf` utility of the binutils package. A local attacker could | |
CVE-2026-6845 |
medium | 5.0 | 0.0015 | 2026-10-29 | A flaw was found in binutils, specifically within the `readelf` utility. This vulnerabilit | |
CVE-2026-33259 |
medium | 5.0 | 0.0022 | 2026-10-29 | Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use af | |
CVE-2026-33261 |
medium | 5.9 | 0.0024 | 2026-10-29 | A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a d | |
CVE-2026-33262 |
medium | 5.9 | 0.0042 | 2026-10-29 | An attacker can send replies that result in a null pointer dereference, caused by a missin | |
CVE-2026-33600 |
medium | 4.9 | 0.0052 | 2026-10-29 | An RPZ sent by a malicious authoritative server can result in a null pointer dereference, | |
CVE-2026-33601 |
medium | 4.9 | 0.0051 | 2026-10-29 | If you use the zoneToCache function with a malicious authoritative server, an attacker can |