Browse All CVEs
13,196 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-54407 |
high | 8.6 | 0.0045 | 2026-10-29 | A malicious actor with access to the network could exploit an Improper Access Control vuln | |
CVE-2026-54409 |
high | 8.1 | 0.0044 | 2026-10-29 | A malicious actor with access to the network and under certain conditions could exploit an | |
CVE-2026-55111 |
high | 7.5 | 0.0050 | 2026-10-29 | A malicious actor with access to the network could exploit a Path Traversal vulnerability | |
CVE-2026-55113 |
high | 7.5 | 0.0037 | 2026-10-29 | A malicious actor with access to the network could exploit a Server-Side Request Forgery ( | |
CVE-2026-55114 |
high | 8.8 | 0.0047 | 2026-10-29 | A malicious actor with access to the network and low privileges could exploit an Improper | |
CVE-2026-55117 |
high | 8.6 | 0.0056 | 2026-10-29 | A malicious actor with access to the network could exploit a Path Traversal vulnerability | |
CVE-2026-55118 |
high | 8.3 | 0.0037 | 2026-10-29 | A malicious actor with access to the network,low privileges and under certain conditions c | |
CVE-2026-55119 |
high | 8.1 | 0.0039 | 2026-10-29 | A malicious actor with access to the network and low privileges could exploit an Improper | |
CVE-2026-56841 |
high | 8.8 | 0.0049 | 2026-10-29 | A malicious actor with access to the network and low privileges could exploit an authentic | |
CVE-2026-56842 |
high | 7.5 | 0.0036 | 2026-10-29 | A malicious actor with access to the network and under certain conditions could exploit an | |
CVE-2026-8079 |
high | 8.7 | 0.0032 | 2026-10-29 | In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby a | |
CVE-2026-9272 |
high | 8.7 | 0.0043 | 2026-10-29 | In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exists whereb | |
CVE-2026-44941 |
high | 8.8 | 0.0053 | 2026-10-29 | A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before | |
CVE-2026-50281 |
high | 7.1 | 0.0043 | 2026-10-29 | Craft CMS is a content management system (CMS). Versions 5.7.0 and above, prior to 5.9.21 | |
CVE-2026-55950 |
high | 8.7 | 0.0038 | 2026-10-29 | Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_pa | |
CVE-2026-55952 |
high | 8.2 | 0.0048 | 2026-10-29 | The Erlang/OTP ssl application does not validate that the PSK identity list and binder lis | |
CVE-2026-8699 |
high | 7.0 | 0.0028 | 2026-10-29 | A stored Cross-Site Scripting (XSS) vulnerability has been identified in the web-based man | |
CVE-2026-58465 |
high | 8.7 | 0.0092 | 2026-10-29 | Eclipse Wakaama before snapshot/2026-05-26 contains an unbounded memory allocation vulnera | |
CVE-2026-52187 |
high | 7.5 | 0.0052 | 2026-10-29 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote a | |
CVE-2026-58467 |
high | 8.2 | 0.0173 | 2026-10-29 | Cockpit CMS through 2.14.0 contains a path traversal and local file inclusion vulnerabilit | |
CVE-2026-59092 |
high | 7.0 | 0.0066 | 2026-10-29 | JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerab | |
CVE-2026-59094 |
high | 8.7 | 0.0079 | 2026-10-29 | Pathway through 0.31.1, fixed in commit d09722e, document store applies a caller-supplied | |
CVE-2026-59096 |
high | 8.2 | 0.0034 | 2026-10-29 | Dapr Sentry's OIDC discovery endpoint derives the issuer and jwks_uri of the /.well-known/ | |
CVE-2026-59098 |
high | 7.1 | 0.0042 | 2026-10-29 | LobeChat through 2.2.9 contains a broken access control vulnerability in the retrieval-aug | |
CVE-2026-52189 |
high | 7.5 | 0.0052 | 2026-10-29 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote a | |
CVE-2026-52191 |
high | 7.5 | 0.0052 | 2026-10-29 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote a | |
CVE-2026-52192 |
high | 7.5 | 0.0058 | 2026-10-29 | An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a de | |
CVE-2026-58460 |
high | 7.0 | 0.0019 | 2026-10-29 | react-native-receive-sharing-intent contains a path traversal vulnerability that allows a | |
CVE-2026-12413 |
high | 7.5 | 0.0060 | 2026-10-29 | An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and resta | |
CVE-2026-54998 |
high | 8.8 | 0.0078 | 2026-10-29 | Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elev | |
CVE-2026-13050 |
high | 8.6 | 0.0064 | 2026-10-29 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allo | |
CVE-2026-13053 |
high | 8.6 | 0.0064 | 2026-10-29 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authen | |
CVE-2026-13054 |
high | 8.6 | 0.0060 | 2026-10-29 | A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a pr | |
CVE-2026-13079 |
high | 7.3 | 0.0014 | 2026-10-29 | A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client fo | |
CVE-2026-13084 |
high | 8.7 | 0.0061 | 2026-10-29 | A null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unau | |
CVE-2026-13383 |
high | 8.6 | 0.0072 | 2026-10-29 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allo | |
CVE-2026-13384 |
high | 8.6 | 0.0072 | 2026-10-29 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow | |
CVE-2026-13722 |
high | 8.6 | 0.0033 | 2026-10-29 | WatchGuard Fireware OS contains a firmware validation bypass when processing a backup imag | |
CVE-2026-8247 |
high | 7.7 | 0.0038 | 2026-10-29 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticate | |
CVE-2026-8921 |
high | 8.5 | 0.0015 | 2026-10-29 | External Control of File Name or Path vulnerability in ASUS Business Manager allows a loca | |
CVE-2026-4967 |
high | 7.5 | 0.0071 | 2026-10-29 | In IMS, there is a possible out of bounds read due to a missing bounds check. This could l | |
CVE-2026-47897 |
high | 8.9 | 0.0072 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-47896 |
high | 8.9 | 0.0081 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-10054 |
high | 8.8 | 0.0022 | 2026-10-29 | In affected versions of Eclipse Theia (1.8.1 and later), the browser backend exposes privi | |
CVE-2026-10055 |
high | 8.5 | 0.0040 | 2026-10-29 | In Eclipse Theia since version 1.26.0, the backend /services/request-service RPC accepts a | |
CVE-2026-13341 |
high | 7.4 | 0.0045 | 2026-10-29 | A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to ve | |
CVE-2026-14459 |
high | 8.8 | 0.0021 | 2026-10-29 | Improper neutralization of argument delimiters in a command ('argument injection') vulnera | |
CVE-2026-14460 |
high | 8.8 | 0.0016 | 2026-10-29 | Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Insti | |
CVE-2026-49814 |
high | 7.2 | 0.0200 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-49815 |
high | 7.2 | 0.0171 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 |