Browse All CVEs
13,193 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-12252 |
high | 7.8 | 0.0019 | 2026-10-29 | In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagge | |
CVE-2026-12195 |
high | 8.5 | 0.0066 | 2026-10-29 | myVesta is affected by an authenticated remote code execution vulnerability. Low privilege | |
CVE-2026-14534 |
high | 8.8 | 0.0059 | 2026-10-29 | Trail of Bits fickling versions up to and including 0.1.10 do not include the Python stand | |
CVE-2026-12740 |
high | 8.1 | 0.0023 | 2026-10-29 | Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state | |
CVE-2026-12746 |
high | 8.1 | 0.0025 | 2026-10-29 | Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OA | |
CVE-2026-14637 |
high | 7.8 | 0.0083 | 2026-10-29 | A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap | |
CVE-2026-14570 |
high | 7.5 | 0.0051 | 2026-10-29 | Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a | |
CVE-2026-14721 |
high | 7.4 | 0.0079 | 2026-10-29 | A vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects | |
CVE-2026-12250 |
high | 7.9 | 0.0015 | 2026-10-29 | Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM | |
CVE-2026-6509 |
high | 7.8 | 0.0014 | 2026-10-29 | Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Insti | |
CVE-2026-9085 |
high | 8.8 | 0.0014 | 2026-10-29 | Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerabili | |
CVE-2026-59510 |
high | 7.1 | 0.0051 | 2026-10-29 | AIL Framework contains a path traversal vulnerability in its PDF object handling. Prior to | |
CVE-2026-14809 |
high | 8.7 | 0.0056 | 2026-10-29 | Prog Management System developed by PROG MIS has a SQL Injection vulnerability, allowing u | |
CVE-2026-24012 |
high | 7.5 | 0.0074 | 2026-10-29 | Uncontrolled Resource Consumption vulnerability in Apache IoTDB. Some interface fails to | |
CVE-2026-40859 |
high | 8.1 | 0.0089 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in Apache Camel. The camel-vertx-http com | |
CVE-2026-42527 |
high | 8.1 | 0.0067 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputF | |
CVE-2026-43865 |
high | 8.1 | 0.0098 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The | |
CVE-2026-43866 |
high | 7.3 | 0.0065 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in Apache Camel, Apache Camel JMS componen | |
CVE-2026-44934 |
high | 7.0 | 0.0015 | 2026-10-29 | A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1. | |
CVE-2026-46457 |
high | 7.5 | 0.0066 | 2026-10-29 | Improper Input Validation vulnerability in Apache Camel NATS component. The camel-nats co | |
CVE-2026-46585 |
high | 7.5 | 0.0063 | 2026-10-29 | Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability | |
CVE-2026-46590 |
high | 8.8 | 0.0084 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in Apache Camel PQC component. The camel- | |
CVE-2026-46591 |
high | 8.2 | 0.0055 | 2026-10-29 | Improper Neutralization of Special Elements in Data Query Logic vulnerability in Apache Ca | |
CVE-2026-46592 |
high | 7.5 | 0.0063 | 2026-10-29 | Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerabil | |
CVE-2026-46726 |
high | 7.5 | 0.0086 | 2026-10-29 | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Ser | |
CVE-2026-44937 |
high | 8.3 | 0.0042 | 2026-10-29 | Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher | |
CVE-2026-46587 |
high | 7.3 | 0.0069 | 2026-10-29 | Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: | |
CVE-2026-46588 |
high | 7.3 | 0.0069 | 2026-10-29 | Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: | |
CVE-2026-49042 |
high | 7.3 | 0.0069 | 2026-10-29 | Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: | |
CVE-2026-49297 |
high | 8.1 | 0.0099 | 2026-10-29 | Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransfo | |
CVE-2026-56810 |
high | 8.7 | 0.0043 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint (Mi | |
CVE-2026-58226 |
high | 8.7 | 0.0057 | 2026-10-29 | Inefficient Algorithmic Complexity vulnerability in elixir-mint hpax allows unauthenticate | |
CVE-2026-6901 |
high | 8.4 | 0.0016 | 2026-10-29 | Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL. This issue a | |
CVE-2026-13705 |
high | 7.1 | 0.0018 | 2026-10-29 | Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager | |
CVE-2026-13708 |
high | 7.5 | 0.0061 | 2026-10-29 | Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG wit | |
CVE-2026-43825 |
high | 7.3 | 0.1392 | 2026-10-29 | Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: befo | |
CVE-2026-13753 |
high | 7.5 | 0.0046 | 2026-10-29 | Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclo | |
CVE-2026-54059 |
high | 7.5 | 0.0041 | 2026-10-29 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() re | |
CVE-2026-54060 |
high | 7.5 | 0.0042 | 2026-10-29 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() as | |
CVE-2026-55379 |
high | 7.5 | 0.0052 | 2026-10-29 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read th | |
CVE-2026-55380 |
high | 7.5 | 0.0052 | 2026-10-29 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open( | |
CVE-2026-9181 |
high | 7.5 | 0.0122 | 2026-10-29 | Esri ArcGIS Server contains a directory traversal vulnerability. ArcGIS Enterprise on Kube | |
CVE-2026-14536 |
high | 8.8 | 0.0043 | 2026-10-29 | Improper enforcement of a mandatory multi-factor authentication policy in Devolutions Serv | |
CVE-2026-14468 |
high | 7.7 | 0.0044 | 2026-10-29 | HashiCorp Terraform Enterprise contained an issue in its version control system (VCS) inge | |
CVE-2026-14471 |
high | 8.6 | 0.0058 | 2026-10-29 | Improper Neutralization of Special Elements in the metrics-service retention policy manage | |
CVE-2026-21379 |
high | 7.8 | 0.0010 | 2026-10-29 | Memory Corruption when allocating memory with sizes that exceed the maximum allowed value. | |
CVE-2026-21383 |
high | 7.1 | 0.0010 | 2026-10-29 | Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, wh | |
CVE-2026-25268 |
high | 8.8 | 0.0011 | 2026-10-29 | Memory Corruption when processing invalid HT40 channel layouts during dynamic channel swit | |
CVE-2026-25271 |
high | 7.0 | 0.0007 | 2026-10-29 | Memory Corruption when processing asynchronous input parameters due to improper handling o | |
CVE-2026-54234 |
high | 7.5 | 0.0062 | 2026-10-29 | vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prio |