Browse All CVEs
13,196 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-53478 |
high | 7.2 | 0.0200 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-20779 |
high | 7.1 | 0.0049 | 2026-10-29 | Gitea versions from 1.5.0 before 1.26.3 have a TOTP single-use enforcement defect that all | |
CVE-2026-22555 |
high | 8.1 | 0.0039 | 2026-10-29 | Gitea versions before 1.26.0 allow API users to fork a repository into an organization wit | |
CVE-2026-24451 |
high | 7.5 | 0.0045 | 2026-10-29 | Gitea 1.26.2 allows fork synchronization to continue after a parent repository changes fro | |
CVE-2026-24690 |
high | 7.5 | 0.0045 | 2026-10-29 | Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing | |
CVE-2026-25038 |
high | 7.5 | 0.0062 | 2026-10-29 | Gitea 1.26.2 allows unauthorized users to access labels of private organizations. | |
CVE-2026-25712 |
high | 7.5 | 0.0048 | 2026-10-29 | Gitea versions before 1.25.5 have insufficient visibility checks in organization permissio | |
CVE-2026-26231 |
high | 8.5 | 0.0036 | 2026-10-29 | Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permissio | |
CVE-2026-26307 |
high | 7.5 | 0.0063 | 2026-10-29 | Gitea versions before 1.25.5 do not enforce a timeout on git grep searches, allowing expen | |
CVE-2026-27657 |
high | 7.5 | 0.0045 | 2026-10-29 | Gitea versions before 1.25.5 allow a user to change another user's primary email address. | |
CVE-2026-27660 |
high | 7.5 | 0.0045 | 2026-10-29 | Gitea versions before 1.25.5 allow draft release data or attachments to be accessed withou | |
CVE-2026-27771 |
high | 8.2 | 0.0139 | 2026-10-29 | Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer | |
CVE-2026-27775 |
high | 8.8 | 0.0091 | 2026-10-29 | Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one | |
CVE-2026-27779 |
high | 7.5 | 0.0058 | 2026-10-29 | Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when dete | |
CVE-2026-28699 |
high | 8.1 | 0.0055 | 2026-10-29 | Gitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to b | |
CVE-2026-28737 |
high | 8.7 | 0.0041 | 2026-10-29 | Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the ext | |
CVE-2026-28740 |
high | 7.1 | 0.0032 | 2026-10-29 | Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private | |
CVE-2026-28744 |
high | 8.1 | 0.0043 | 2026-10-29 | Gitea versions up to and including 1.26.1 allow Git smart HTTP requests authenticated with | |
CVE-2026-56645 |
high | 8.8 | 0.0082 | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attac | |
CVE-2026-57974 |
high | 8.8 | 0.0082 | 2026-10-29 | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized a | |
CVE-2026-57975 |
high | 7.5 | 0.0061 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-57977 |
high | 7.1 | 0.0058 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-57981 |
high | 8.8 | 0.0082 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-57983 |
high | 8.7 | 0.0065 | 2026-10-29 | Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-57984 |
high | 7.5 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-57985 |
high | 7.6 | 0.0072 | 2026-10-29 | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attack | |
CVE-2026-57986 |
high | 7.5 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-57988 |
high | 7.1 | 0.0076 | 2026-10-29 | Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-57991 |
high | 7.4 | 0.0104 | 2026-10-29 | Improper link resolution before file access ('link following') in Microsoft Edge (Chromium | |
CVE-2026-57992 |
high | 7.5 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-57993 |
high | 7.4 | 0.0088 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthoriz | |
CVE-2026-58276 |
high | 7.5 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-58282 |
high | 8.1 | 0.0042 | 2026-10-29 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-58283 |
high | 8.1 | 0.0044 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-58284 |
high | 8.3 | 0.0056 | 2026-10-29 | Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-58285 |
high | 8.3 | 0.0061 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-58286 |
high | 8.1 | 0.0042 | 2026-10-29 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-58287 |
high | 8.3 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-58288 |
high | 8.3 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-58290 |
high | 7.5 | 0.0043 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-58292 |
high | 7.5 | 0.0048 | 2026-10-29 | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attack | |
CVE-2026-58293 |
high | 8.1 | 0.0061 | 2026-10-29 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unautho | |
CVE-2026-58294 |
high | 7.5 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-58295 |
high | 8.3 | 0.0051 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-58296 |
high | 7.1 | 0.0054 | 2026-10-29 | Exposure of private personal information to an unauthorized actor in Microsoft Edge for An | |
CVE-2026-58297 |
high | 7.1 | 0.0054 | 2026-10-29 | Exposure of private personal information to an unauthorized actor in Microsoft Edge for An | |
CVE-2026-58298 |
high | 7.2 | 0.0041 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-58299 |
high | 7.5 | 0.0047 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an | |
CVE-2026-58419 |
high | 7.5 | 0.0038 | 2026-10-29 | Notification API leaks private issue metadata after access revocation | |
CVE-2026-58421 |
high | 7.5 | 0.0040 | 2026-10-29 | Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service |