Browse All CVEs
13,216 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-16365 |
high | 8.8 | 0.0028 | 2026-10-29 | Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefo | |
CVE-2026-16366 |
high | 8.8 | 0.0040 | 2026-10-29 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Fir | |
CVE-2026-16371 |
high | 8.8 | 0.0044 | 2026-10-29 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Fir | |
CVE-2026-16372 |
high | 8.8 | 0.0041 | 2026-10-29 | Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed | |
CVE-2026-16373 |
high | 7.5 | 0.0037 | 2026-10-29 | Information disclosure in the Privacy component in Firefox for Android. This vulnerability | |
CVE-2026-16374 |
high | 7.5 | 0.0044 | 2026-10-29 | Information disclosure in the Framework component in DevTools. This vulnerability was fixe | |
CVE-2026-16376 |
high | 7.5 | 0.0052 | 2026-10-29 | Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firef | |
CVE-2026-16378 |
high | 7.5 | 0.0042 | 2026-10-29 | Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fix | |
CVE-2026-16379 |
high | 8.8 | 0.0042 | 2026-10-29 | Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed | |
CVE-2026-16384 |
high | 7.5 | 0.0043 | 2026-10-29 | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This | |
CVE-2026-16385 |
high | 7.5 | 0.0043 | 2026-10-29 | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This | |
CVE-2026-16386 |
high | 7.5 | 0.0043 | 2026-10-29 | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This | |
CVE-2026-16391 |
high | 7.5 | 0.0044 | 2026-10-29 | Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed i | |
CVE-2026-16396 |
high | 8.8 | 0.0045 | 2026-10-29 | Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefo | |
CVE-2026-16398 |
high | 7.5 | 0.0022 | 2026-10-29 | Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 15 | |
CVE-2026-16399 |
high | 7.5 | 0.0022 | 2026-10-29 | Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Fir | |
CVE-2026-16400 |
high | 7.5 | 0.0043 | 2026-10-29 | Information disclosure in the DOM: Security component. This vulnerability was fixed in Fir | |
CVE-2026-16401 |
high | 8.8 | 0.0040 | 2026-10-29 | Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed i | |
CVE-2026-16404 |
high | 7.4 | 0.0027 | 2026-10-29 | Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153. | |
CVE-2026-16405 |
high | 7.5 | 0.0044 | 2026-10-29 | Information disclosure in the Networking: WebSockets component. This vulnerability was fix | |
CVE-2026-16409 |
high | 7.5 | 0.0052 | 2026-10-29 | Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 15 | |
CVE-2026-16445 |
high | 7.5 | 0.0322 | 2026-10-29 | A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vul | |
CVE-2026-46681 |
high | 7.2 | 0.0036 | 2026-10-29 | @nevware21/ts-utils is a comprehensive TypeScript/JavaScript utility library. Prior to ver | |
CVE-2026-65049 |
high | 8.4 | 0.0044 | 2026-10-29 | Ninja Forms plugin version 3.14.8 and prior for WordPress Multisite contains an incorrect | |
CVE-2026-65050 |
high | 7.1 | 0.0044 | 2026-10-29 | Ninja Forms WordPress plugin version 3.14.8 and prior contains a missing authorization vul | |
CVE-2026-65052 |
high | 8.7 | 0.0058 | 2026-10-29 | Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validatio | |
CVE-2026-47394 |
high | 8.7 | 0.0050 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, the fix for GHSA-9mqq-jq | |
CVE-2026-15724 |
high | 8.7 | 0.0052 | 2026-10-29 | In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an auth | |
CVE-2026-15793 |
high | 7.3 | 0.0020 | 2026-10-29 | BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundl | |
CVE-2026-15829 |
high | 8.6 | 0.0020 | 2026-10-29 | A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in th | |
CVE-2026-47397 |
high | 7.1 | 0.0046 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadata in a web | |
CVE-2026-47398 |
high | 8.1 | 0.0050 | 2026-10-29 | PraisonAI is a multi-agent teams system. The v4.6.32 chokepoint refactor (which patched CV | |
CVE-2026-47399 |
high | 8.8 | 0.0036 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior | |
CVE-2026-47405 |
high | 8.8 | 0.0036 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-47406 |
high | 8.1 | 0.0041 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-47409 |
high | 8.1 | 0.0034 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-21575 |
high | 8.0 | 0.0059 | 2026-10-29 | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4 | |
CVE-2026-21577 |
high | 7.1 | 0.0043 | 2026-10-29 | This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, | |
CVE-2026-21579 |
high | 8.2 | 0.0044 | 2026-10-29 | This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, | |
CVE-2026-44880 |
high | 8.8 | 0.0075 | 2026-10-29 | A buffer overflow vulnerability was found in the command line interface of AOS-CX. Success | |
CVE-2026-47412 |
high | 8.1 | 0.0053 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-47414 |
high | 7.6 | 0.0038 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-47415 |
high | 8.3 | 0.0039 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-47417 |
high | 8.1 | 0.0036 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-47418 |
high | 8.1 | 0.0041 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-47419 |
high | 8.3 | 0.0034 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-55081 |
high | 7.3 | 0.0044 | 2026-10-29 | DHIS2 is a flexible information system for data capture, management, validation, analytics | |
CVE-2026-55082 |
high | 8.7 | 0.0058 | 2026-10-29 | DHIS2 is a flexible information system for data capture, management, validation, analytics | |
CVE-2026-55084 |
high | 8.8 | 0.0046 | 2026-10-29 | DHIS2 is a flexible information system for data capture, management, validation, analytics | |
CVE-2026-63453 |
high | 7.2 | 0.0062 | 2026-10-29 | Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful |