Browse All CVEs
3,540 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-16913 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16917 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16919 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-55089 |
critical | 9.9 | 0.0046 | 2026-10-29 | Etherpad is a real-time collaborative editor. From 2.1.0 until 3.1.0, Etherpad's src/node/ | |
CVE-2026-75595 |
critical | 9.1 | 0.0032 | 2026-10-29 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fin | |
CVE-2026-76311 |
critical | 9.4 | 0.0045 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated | |
CVE-2026-76404 |
critical | 9.1 | 0.0075 | 2026-10-29 | In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role co | |
CVE-2026-76886 |
critical | 9.8 | 0.0038 | 2026-10-29 | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of ser | |
CVE-2026-66592 |
critical | 9.3 | 0.0040 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-74001 |
critical | 9.8 | 0.0061 | 2026-10-29 | Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versi | |
CVE-2026-74014 |
critical | 9.9 | 0.0048 | 2026-10-29 | Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions. | |
CVE-2026-15706 |
critical | 9.8 | 0.0064 | 2026-10-29 | Missing authentication for critical function vulnerability in Baylan Measuring Instruments | |
CVE-2026-16926 |
critical | 9.1 | 0.0056 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite a | |
CVE-2026-2334 |
critical | 9.4 | 0.0072 | 2026-10-29 | An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative | |
CVE-2026-53424 |
critical | 9.1 | 0.0060 | 2026-10-29 | Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker | |
CVE-2026-63382 |
critical | 9.2 | 0.0078 | 2026-10-29 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent e | |
CVE-2026-63385 |
critical | 9.2 | 0.0129 | 2026-10-29 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has t | |
CVE-2026-19586 |
critical | 9.3 | 0.0572 | 2026-10-29 | A pre-authentication OS command injection vulnerability has been identified in Omada gatew | |
CVE-2026-67567 |
critical | 9.9 | 0.0062 | 2026-10-29 | A flaw was found in the multicloud-operators-subscription component. This vulnerability al | |
CVE-2026-17000 |
critical | 9.8 | 0.0077 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17003 |
critical | 9.1 | 0.0044 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise | |
CVE-2026-17006 |
critical | 9.8 | 0.0077 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17024 |
critical | 9.8 | 0.0035 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17040 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17060 |
critical | 9.1 | 0.0071 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sens | |
CVE-2026-17118 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17122 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17136 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17138 |
critical | 9.8 | 0.0067 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17141 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17142 |
critical | 9.8 | 0.0092 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17145 |
critical | 9.8 | 0.0073 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17152 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17157 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17160 |
critical | 9.8 | 0.0080 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17423 |
critical | 9.1 | 0.0045 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sens | |
CVE-2026-17436 |
critical | 9.8 | 0.0092 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-18670 |
critical | 9.1 | 0.0053 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-18716 |
critical | 9.1 | 0.0039 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker | |
CVE-2026-18832 |
critical | 9.8 | 0.0092 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-18835 |
critical | 9.9 | 0.0079 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker | |
CVE-2026-19437 |
critical | 9.8 | 0.0067 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-55769 |
critical | 9.4 | 0.0077 | 2026-10-29 | CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes envi | |
CVE-2026-77644 |
critical | 9.3 | 0.0043 | 2026-10-29 | A critical bypass access control vulnerability has been reported in PTC Windchill Risk and | |
CVE-2026-77645 |
critical | 9.2 | 0.0056 | 2026-10-29 | A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill an | |
CVE-2026-77647 |
critical | 9.8 | 0.0229 | 2026-10-29 | SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as e | |
CVE-2026-77264 |
critical | 9.8 | 0.0071 | 2026-10-29 | The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code | |
CVE-2026-76571 |
critical | 9.3 | 0.0042 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition p | |
CVE-2026-76602 |
critical | 9.3 | 0.0039 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4. | |
CVE-2026-76604 |
critical | 10.0 | 0.0070 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form eleme |