Browse All CVEs
13,200 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-58399 |
high | 8.7 | 0.0097 | 2026-10-29 | @acastellon/auth is an authentication control system for microservices. Versions prior to | |
CVE-2026-6682 |
high | 7.6 | 0.0032 | 2026-10-29 | In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where f | |
CVE-2026-6687 |
high | 7.6 | 0.0035 | 2026-10-29 | FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label | |
CVE-2026-6688 |
high | 7.6 | 0.0032 | 2026-10-29 | FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with | |
CVE-2026-24240 |
high | 7.8 | 0.0043 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause de | |
CVE-2026-24242 |
high | 7.8 | 0.0019 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause se | |
CVE-2026-24243 |
high | 7.8 | 0.0043 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause de | |
CVE-2026-24244 |
high | 7.8 | 0.0043 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause de | |
CVE-2026-24245 |
high | 7.8 | 0.0043 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause de | |
CVE-2026-24246 |
high | 7.8 | 0.0043 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause im | |
CVE-2026-24247 |
high | 7.8 | 0.0043 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause de | |
CVE-2026-24248 |
high | 7.8 | 0.0024 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause im | |
CVE-2026-24249 |
high | 7.8 | 0.0023 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause de | |
CVE-2026-24250 |
high | 7.8 | 0.0040 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause im | |
CVE-2026-24251 |
high | 7.8 | 0.0040 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause im | |
CVE-2026-24264 |
high | 7.5 | 0.0072 | 2026-10-29 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can ca | |
CVE-2026-24266 |
high | 7.5 | 0.0067 | 2026-10-29 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can ca | |
CVE-2026-20191 |
high | 7.5 | 0.0065 | 2026-10-29 | A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker t | |
CVE-2026-20213 |
high | 7.5 | 0.0057 | 2026-10-29 | A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, rem | |
CVE-2026-20214 |
high | 7.5 | 0.0057 | 2026-10-29 | A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, re | |
CVE-2026-20215 |
high | 7.5 | 0.0057 | 2026-10-29 | A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, rem | |
CVE-2026-20216 |
high | 7.5 | 0.0057 | 2026-10-29 | A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthent | |
CVE-2026-20217 |
high | 7.5 | 0.0057 | 2026-10-29 | A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, | |
CVE-2026-20243 |
high | 7.5 | 0.0057 | 2026-10-29 | A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, re | |
CVE-2026-20244 |
high | 7.5 | 0.0057 | 2026-10-29 | A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, re | |
CVE-2026-34100 |
high | 8.7 | 0.0046 | 2026-10-29 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL quer | |
CVE-2026-34101 |
high | 8.7 | 0.0046 | 2026-10-29 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL quer | |
CVE-2026-34102 |
high | 8.7 | 0.0046 | 2026-10-29 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL quer | |
CVE-2026-34103 |
high | 8.7 | 0.0046 | 2026-10-29 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL quer | |
CVE-2026-34104 |
high | 8.7 | 0.0046 | 2026-10-29 | Guardian language-system passes the name GET parameter directly into an unsanitized SQL qu | |
CVE-2026-34105 |
high | 8.7 | 0.0046 | 2026-10-29 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL quer | |
CVE-2026-54399 |
high | 7.5 | 0.0078 | 2026-10-29 | Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache H | |
CVE-2026-56150 |
high | 7.5 | 0.0048 | 2026-10-29 | Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to | |
CVE-2026-57516 |
high | 8.6 | 0.0086 | 2026-10-29 | Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset rea | |
CVE-2026-58452 |
high | 8.7 | 0.0267 | 2026-10-29 | JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain an OS command | |
CVE-2026-58454 |
high | 7.7 | 0.0083 | 2026-10-29 | JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a remote code | |
CVE-2026-49091 |
high | 8.0 | 0.0032 | 2026-10-29 | Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via | |
CVE-2026-54428 |
high | 7.5 | 0.0087 | 2026-10-29 | Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache | |
CVE-2026-57723 |
high | 7.4 | 0.0017 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikBooking Hotel Booking Engin | |
CVE-2026-13760 |
high | 7.0 | 0.0116 | 2026-10-29 | OS command injection in the NodejsFunction Docker bundling pipeline (OsCommand helper) in | |
CVE-2026-41121 |
high | 7.8 | 0.0017 | 2026-10-29 | Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resol | |
CVE-2026-49119 |
high | 8.7 | 0.0069 | 2026-10-29 | Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component' | |
CVE-2026-58451 |
high | 7.1 | 0.0056 | 2026-10-29 | Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that all | |
CVE-2026-14265 |
high | 7.7 | 0.0073 | 2026-10-29 | Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS | |
CVE-2026-58592 |
high | 8.9 | 0.0055 | 2026-10-29 | Ladybird before commit 2f9dc7e contains a dangling-reference memory-safety flaw in its Web | |
CVE-2026-50521 |
high | 8.3 | 0.0082 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute | |
CVE-2026-55153 |
high | 7.1 | 0.0019 | 2026-10-29 | mchange-commons-java is a Java library of shared utility classes used by mchange projects | |
CVE-2026-58263 |
high | 7.2 | 0.0022 | 2026-10-29 | Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. In versions | |
CVE-2026-52190 |
high | 7.5 | 0.0052 | 2026-10-29 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote a | |
CVE-2026-54712 |
high | 7.5 | 0.0046 | 2026-10-29 | OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrum |