Browse All CVEs
3,534 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-73865 |
critical | 9.1 | 0.0043 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73866 |
critical | 9.1 | 0.0043 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73905 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73912 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73916 |
critical | 9.1 | 0.0043 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73917 |
critical | 9.1 | 0.0043 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73920 |
critical | 9.4 | 0.0046 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73921 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73922 |
critical | 9.1 | 0.0043 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73924 |
critical | 9.1 | 0.0043 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73930 |
critical | 9.9 | 0.0037 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-76035 |
critical | 9.6 | 0.0046 | 2026-10-29 | Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 a | |
CVE-2026-76036 |
critical | 9.6 | 0.0051 | 2026-10-29 | Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a r | |
CVE-2026-11751 |
critical | 9.1 | 0.0032 | 2026-10-29 | A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS ups | |
CVE-2026-76008 |
critical | 10.0 | 0.0102 | 2026-10-29 | A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_ | |
CVE-2026-58081 |
critical | 9.8 | 0.0052 | 2026-10-29 | Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the si | |
CVE-2026-58082 |
critical | 9.8 | 0.0052 | 2026-10-29 | The ISO-2022 encoding module used a stack buffer sized to MB_LEN_MAX (6 bytes) for interme | |
CVE-2026-72889 |
critical | 9.8 | 0.0045 | 2026-10-29 | Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorith | |
CVE-2026-19490 |
critical | 9.3 | 0.3265 | 2026-10-29 | KEV | Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability |
CVE-2026-15065 |
critical | 9.1 | 0.0063 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass | |
CVE-2026-15068 |
critical | 9.9 | 0.0079 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attac | |
CVE-2026-16656 |
critical | 9.8 | 0.0072 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root p | |
CVE-2026-16816 |
critical | 9.9 | 0.0079 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker | |
CVE-2026-71960 |
critical | 9.3 | 0.0053 | 2026-10-29 | Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secr | |
CVE-2026-62668 |
critical | 9.4 | 0.0045 | 2026-10-29 | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your s | |
CVE-2026-48024 |
critical | 9.1 | 0.0078 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-48162 |
critical | 9.1 | 0.0065 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-49441 |
critical | 9.1 | 0.0077 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-71470 |
critical | 9.1 | 0.0071 | 2026-10-29 | A flaw was found in the search-v2-operator. This vulnerability allows a privileged user, s | |
CVE-2026-75143 |
critical | 9.3 | 0.0070 | 2026-10-29 | FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader ( | |
CVE-2026-66794 |
critical | 9.3 | 0.0062 | 2026-10-29 | A flaw was found in the `cluster-proxy-addon` component of Multicluster Engine for Kuberne | |
CVE-2026-70496 |
critical | 9.9 | 0.0055 | 2026-10-29 | A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equival | |
CVE-2026-16822 |
critical | 9.3 | 0.0025 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate | |
CVE-2026-16834 |
critical | 9.8 | 0.0062 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16839 |
critical | 9.4 | 0.0052 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sens | |
CVE-2026-16840 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16845 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16862 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16864 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16872 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16882 |
critical | 9.8 | 0.0086 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16885 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16894 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16903 |
critical | 9.6 | 0.0042 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16913 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16917 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16919 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-55089 |
critical | 9.9 | 0.0046 | 2026-10-29 | Etherpad is a real-time collaborative editor. From 2.1.0 until 3.1.0, Etherpad's src/node/ | |
CVE-2026-75595 |
critical | 9.1 | 0.0032 | 2026-10-29 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fin | |
CVE-2026-76311 |
critical | 9.4 | 0.0045 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated |