Browse All CVEs
13,308 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-66731 |
high | 8.7 | 0.0078 | 2026-10-29 | facil.io 0.7.5 through 0.7.6 contains a denial-of-service vulnerability in the HTTP/1.1 ch | |
CVE-2026-17568 |
high | 8.8 | 0.0042 | 2026-10-29 | Improper access control in the role membership management endpoint in Devolutions Server a | |
CVE-2026-59239 |
high | 8.6 | 0.0067 | 2026-10-29 | Stored Cross-site Scripting (CWE-79) in the email module in Roskus Prospero Flow CRM befor | |
CVE-2026-64641 |
high | 8.2 | 0.0086 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. In versions 13.0.0 | |
CVE-2026-64642 |
high | 8.3 | 0.0063 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. In versions 16.0.0 | |
CVE-2026-64645 |
high | 8.3 | 0.0041 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 | |
CVE-2026-66028 |
high | 7.1 | 0.0061 | 2026-10-29 | Ekushey Project Manager CRM through version 5.0 contains a missing uniqueness constraint v | |
CVE-2026-10682 |
high | 7.8 | 0.0017 | 2026-10-29 | The userspace verifier z_vrfy_log_filter_set() for the log_filter_set syscall in subsys/lo | |
CVE-2026-42016 |
high | 8.8 | 0.0864 | 2026-10-29 | KEV | JFrog Artifactory contains an incorrect authorization vulnerability that leads to a privil |
CVE-2026-42017 |
high | 8.8 | 0.0052 | 2026-10-29 | An event-handling weakness in JFrog Artifactory could expose privileged authorization mate | |
CVE-2026-56747 |
high | 8.7 | 0.0067 | 2026-10-29 | Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl S | |
CVE-2026-56748 |
high | 8.7 | 0.0092 | 2026-10-29 | Improper validation of symbolic links in the Pack Git import feature in Cribl Stream befor | |
CVE-2026-64649 |
high | 8.3 | 0.0046 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. In versions 14.1.1 | |
CVE-2026-65616 |
high | 8.8 | 0.0037 | 2026-10-29 | Incorrect authorization validation in refresh token signature allows non-admin users to ob | |
CVE-2026-65617 |
high | 8.8 | 0.0065 | 2026-10-29 | A deserialization weakness in JFrog Artifactory package handling could allow a low-privile | |
CVE-2026-65921 |
high | 8.8 | 0.0059 | 2026-10-29 | A path validation weakness in archive extraction/write handling allows entries with traver | |
CVE-2026-66014 |
high | 8.8 | 0.0064 | 2026-10-29 | JFrog Artifactory contains an authentication handling weakness in internal request process | |
CVE-2026-66015 |
high | 7.2 | 0.0057 | 2026-10-29 | An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited und | |
CVE-2026-28896 |
high | 7.7 | 0.0019 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and | |
CVE-2026-28912 |
high | 7.8 | 0.0017 | 2026-10-29 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequo | |
CVE-2026-28926 |
high | 7.0 | 0.0012 | 2026-10-29 | A race condition was addressed with improved state handling. This issue is fixed in macOS | |
CVE-2026-28945 |
high | 7.1 | 0.0016 | 2026-10-29 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixe | |
CVE-2026-28981 |
high | 7.8 | 0.0020 | 2026-10-29 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macO | |
CVE-2026-39874 |
high | 7.8 | 0.0015 | 2026-10-29 | A permissions issue was addressed with additional restrictions. This issue is fixed in mac | |
CVE-2026-39875 |
high | 7.8 | 0.0015 | 2026-10-29 | A permissions issue was addressed with additional restrictions. This issue is fixed in mac | |
CVE-2026-39877 |
high | 7.8 | 0.0017 | 2026-10-29 | A memory corruption issue was addressed with improved memory handling. This issue is fixed | |
CVE-2026-43672 |
high | 7.1 | 0.0016 | 2026-10-29 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-43681 |
high | 7.1 | 0.0017 | 2026-10-29 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macO | |
CVE-2026-43693 |
high | 7.0 | 0.0012 | 2026-10-29 | A race condition was addressed with improved state handling. This issue is fixed in macOS | |
CVE-2026-43698 |
high | 7.8 | 0.0022 | 2026-10-29 | An injection issue was addressed with improved validation. This issue is fixed in macOS Go | |
CVE-2026-43728 |
high | 7.5 | 0.0026 | 2026-10-29 | This issue was addressed through improved state management. This issue is fixed in macOS T | |
CVE-2026-43747 |
high | 7.1 | 0.0017 | 2026-10-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in | |
CVE-2026-43749 |
high | 7.8 | 0.0019 | 2026-10-29 | A parsing issue in the handling of directory paths was addressed with improved path valida | |
CVE-2026-43755 |
high | 7.0 | 0.0011 | 2026-10-29 | A race condition was addressed with improved state management. This issue is fixed in macO | |
CVE-2026-43760 |
high | 8.6 | 0.0041 | 2026-10-29 | An access issue was addressed with improved access restrictions. This issue is fixed in ma | |
CVE-2026-43771 |
high | 7.1 | 0.0018 | 2026-10-29 | A stack overflow was addressed with improved input validation. This issue is fixed in macO | |
CVE-2026-43772 |
high | 8.2 | 0.0019 | 2026-10-29 | A path traversal issue was addressed with improved input validation. This issue is fixed i | |
CVE-2026-43777 |
high | 7.5 | 0.0070 | 2026-10-29 | This issue was addressed with improved input validation. This issue is fixed in macOS Sequ | |
CVE-2026-64737 |
high | 8.2 | 0.0016 | 2026-10-29 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-55685 |
high | 8.7 | 0.0071 | 2026-10-29 | React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoin | |
CVE-2026-61953 |
high | 7.2 | 0.0027 | 2026-10-29 | Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 | |
CVE-2026-61957 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 version | |
CVE-2026-65438 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Message Filter for Contact Form 7 <= 1.6.3.9 | |
CVE-2026-65439 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <=3.5.45 | |
CVE-2026-65440 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions. | |
CVE-2026-65441 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions. | |
CVE-2026-65442 |
high | 7.2 | 0.0058 | 2026-10-29 | Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions. | |
CVE-2026-65443 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions. | |
CVE-2026-65446 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions. | |
CVE-2026-66473 |
high | 7.5 | 0.0035 | 2026-10-29 | Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions. |