Browse All CVEs
13,250 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-62189 |
high | 7.6 | 0.0037 | 2026-10-29 | OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror | |
CVE-2026-62190 |
high | 8.7 | 0.0051 | 2026-10-29 | OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flo | |
CVE-2026-62191 |
high | 7.1 | 0.0036 | 2026-10-29 | OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability i | |
CVE-2026-62192 |
high | 7.2 | 0.0042 | 2026-10-29 | OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability i | |
CVE-2026-62195 |
high | 8.7 | 0.0040 | 2026-10-29 | OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability | |
CVE-2026-62199 |
high | 8.7 | 0.0053 | 2026-10-29 | OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that c | |
CVE-2026-62200 |
high | 8.7 | 0.0053 | 2026-10-29 | OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that c | |
CVE-2026-62240 |
high | 8.3 | 0.0052 | 2026-10-29 | CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_ | |
CVE-2026-62242 |
high | 7.7 | 0.0037 | 2026-10-29 | Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability | |
CVE-2026-62328 |
high | 8.7 | 0.0046 | 2026-10-29 | 9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerabi | |
CVE-2026-57855 |
high | 8.7 | 0.0052 | 2026-10-29 | Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API | |
CVE-2026-57856 |
high | 8.7 | 0.0048 | 2026-10-29 | Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/syste | |
CVE-2026-58101 |
high | 7.5 | 0.0031 | 2026-10-29 | Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL point | |
CVE-2026-0487 |
high | 8.4 | 0.0021 | 2026-10-29 | SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) fi | |
CVE-2026-44745 |
high | 8.1 | 0.0047 | 2026-10-29 | SAP Approuter does not properly validate incoming request headers during the OAuth2 login | |
CVE-2026-44752 |
high | 8.2 | 0.0036 | 2026-10-29 | SAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicio | |
CVE-2026-58233 |
high | 7.6 | 0.0056 | 2026-10-29 | SAP Change and Transport System Attach Tool (ctsattach) allows an authenticated attacker t | |
CVE-2026-59674 |
high | 7.1 | 0.0017 | 2026-10-29 | A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata pac | |
CVE-2026-15075 |
high | 8.2 | 0.0020 | 2026-10-29 | In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), | |
CVE-2026-15076 |
high | 8.2 | 0.0020 | 2026-10-29 | In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientS | |
CVE-2026-9561 |
high | 8.8 | 0.0028 | 2026-10-29 | Eclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-For HTTP header | |
CVE-2026-15691 |
high | 7.4 | 0.0085 | 2026-10-29 | A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects the functi | |
CVE-2026-15692 |
high | 7.4 | 0.0085 | 2026-10-29 | A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects t | |
CVE-2026-8085 |
high | 7.0 | 0.0027 | 2026-10-29 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability | |
CVE-2026-8312 |
high | 7.0 | 0.0027 | 2026-10-29 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability | |
CVE-2026-8313 |
high | 7.0 | 0.0027 | 2026-10-29 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability | |
CVE-2026-8314 |
high | 7.0 | 0.0027 | 2026-10-29 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability | |
CVE-2026-15693 |
high | 7.4 | 0.0085 | 2026-10-29 | A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This issue affec | |
CVE-2026-10669 |
high | 7.8 | 0.0018 | 2026-10-29 | On Xtensa SoCs built with CONFIG_XTENSA_MPU and CONFIG_USERSPACE, arch_buffer_validate() i | |
CVE-2026-10671 |
high | 7.1 | 0.0016 | 2026-10-29 | In Zephyr's kernel pipe implementation, the userspace syscall verifier z_vrfy_k_pipe_init( | |
CVE-2026-10714 |
high | 8.8 | 0.0015 | 2026-10-29 | A security issue exists within FactoryTalk® Services Platform (FTSP), allowing an attacker | |
CVE-2026-15694 |
high | 7.4 | 0.0085 | 2026-10-29 | A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromS | |
CVE-2026-15695 |
high | 7.4 | 0.0085 | 2026-10-29 | A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function | |
CVE-2026-15696 |
high | 7.4 | 0.0085 | 2026-10-29 | A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the | |
CVE-2026-15736 |
high | 8.3 | 0.0038 | 2026-10-29 | Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, in | |
CVE-2026-51105 |
high | 7.5 | 0.0037 | 2026-10-29 | Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to c | |
CVE-2026-58476 |
high | 7.0 | 0.0027 | 2026-10-29 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a cross-site request | |
CVE-2026-58477 |
high | 8.8 | 0.0051 | 2026-10-29 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vu | |
CVE-2026-60114 |
high | 8.7 | 0.0050 | 2026-10-29 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vul | |
CVE-2026-9140 |
high | 8.7 | 0.0043 | 2026-10-29 | A denial-of-service security issue exists in the 1719-AENTR. The security issue stems from | |
CVE-2026-11403 |
high | 8.7 | 0.0053 | 2026-10-29 | A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation | |
CVE-2026-11917 |
high | 7.2 | 0.0044 | 2026-10-29 | A path traversal security issue exists within Rockwell Automation ThinManager® software du | |
CVE-2026-12523 |
high | 7.5 | 0.0053 | 2026-10-29 | Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource ex | |
CVE-2026-12659 |
high | 8.7 | 0.0043 | 2026-10-29 | A denial-of-service security issue exists in the affected products. The security issue ste | |
CVE-2026-12707 |
high | 7.5 | 0.0044 | 2026-10-29 | Summary Cloudflare quiche was discovered to be vulnerable to memory resource exhaustion | |
CVE-2026-14504 |
high | 8.2 | 0.0037 | 2026-10-29 | An authorization bypass in Nexus Repository 3's component upload API allowed a user with o | |
CVE-2026-15392 |
high | 7.7 | 0.0020 | 2026-10-29 | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to | |
CVE-2026-55651 |
high | 7.1 | 0.0023 | 2026-10-29 | Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive D | |
CVE-2026-59198 |
high | 7.5 | 0.0031 | 2026-10-29 | Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder read | |
CVE-2026-59199 |
high | 7.5 | 0.0039 | 2026-10-29 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs c |