Browse All CVEs
9,186 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-39810 |
medium | 5.5 | 0.0010 | 2026-10-29 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 throu | |
CVE-2026-39811 |
medium | 4.9 | 0.0037 | 2026-10-29 | A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, F | |
CVE-2026-39812 |
medium | 4.8 | 0.0019 | 2026-10-29 | A improper neutralization of input during web page generation ('cross-site scripting') vul | |
CVE-2026-39814 |
medium | 6.7 | 0.0014 | 2026-10-29 | A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb | |
CVE-2026-4832 |
medium | 6.9 | 0.0027 | 2026-10-29 | CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized a | |
CVE-2026-5713 |
medium | 5.3 | 0.0013 | 2026-10-29 | The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3 | |
CVE-2026-22692 |
medium | 6.8 | 0.0040 | 2026-10-29 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.13 an | |
CVE-2026-27285 |
medium | 5.5 | 0.0014 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Ove | |
CVE-2026-27286 |
medium | 5.5 | 0.0016 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Ove | |
CVE-2026-34626 |
medium | 6.3 | 0.0034 | 2026-10-29 | Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected | |
CVE-2026-0209 |
medium | 6.9 | 0.0038 | 2026-10-29 | Under certain administrative conditions, FlashArray Purity may apply snapshot retention po | |
CVE-2026-0390 |
medium | 6.7 | 0.0032 | 2026-10-29 | Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an autho | |
CVE-2026-20806 |
medium | 5.5 | 0.0034 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows COM allows an aut | |
CVE-2026-20928 |
medium | 4.6 | 0.0043 | 2026-10-29 | Improper removal of sensitive information before storage or transfer in Windows Recovery E | |
CVE-2026-20945 |
medium | 5.4 | 0.1908 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-21331 |
medium | 6.1 | 0.0028 | 2026-10-29 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Sc | |
CVE-2026-23653 |
medium | 6.5 | 0.0074 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Git | |
CVE-2026-23670 |
medium | 5.7 | 0.0027 | 2026-10-29 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allow | |
CVE-2026-24906 |
medium | 5.1 | 0.0025 | 2026-10-29 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.14 an | |
CVE-2026-24907 |
medium | 5.1 | 0.0020 | 2026-10-29 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.14 an | |
CVE-2026-26155 |
medium | 6.5 | 0.0089 | 2026-10-29 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability | |
CVE-2026-26169 |
medium | 6.1 | 0.0231 | 2026-10-29 | Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose inform | |
CVE-2026-26175 |
medium | 4.6 | 0.0040 | 2026-10-29 | Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to b | |
CVE-2026-27258 |
medium | 5.4 | 0.0018 | 2026-10-29 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability | |
CVE-2026-27288 |
medium | 5.4 | 0.0019 | 2026-10-29 | Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based C | |
CVE-2026-27906 |
medium | 4.4 | 0.0039 | 2026-10-29 | Improper input validation in Windows Hello allows an authorized attacker to bypass a secur | |
CVE-2026-27925 |
medium | 6.5 | 0.0036 | 2026-10-29 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorize | |
CVE-2026-27930 |
medium | 5.5 | 0.0038 | 2026-10-29 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information | |
CVE-2026-27931 |
medium | 5.5 | 0.0049 | 2026-10-29 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information | |
CVE-2026-32072 |
medium | 6.2 | 0.0029 | 2026-10-29 | Improper authentication in Windows Active Directory allows an unauthorized attacker to per | |
CVE-2026-32079 |
medium | 5.5 | 0.0034 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows | |
CVE-2026-32081 |
medium | 5.5 | 0.0042 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows | |
CVE-2026-32084 |
medium | 5.5 | 0.0035 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows | |
CVE-2026-32085 |
medium | 5.5 | 0.0044 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Cal | |
CVE-2026-32088 |
medium | 5.7 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32151 |
medium | 6.5 | 0.0075 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an auth |