Browse All CVEs
13,193 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-58210 |
high | 7.5 | 0.0074 | 2026-10-29 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging | |
CVE-2026-58213 |
high | 7.1 | 0.0044 | 2026-10-29 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging | |
CVE-2026-58250 |
high | 7.5 | 0.0074 | 2026-10-29 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging | |
CVE-2026-58253 |
high | 8.8 | 0.0037 | 2026-10-29 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging | |
CVE-2026-59803 |
high | 8.7 | 0.0074 | 2026-10-29 | rpcx through 1.9.3, fixed in commit 047aec1, contains a denial-of-service vulnerability in | |
CVE-2026-59804 |
high | 7.6 | 0.0031 | 2026-10-29 | Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missing authent | |
CVE-2026-59805 |
high | 7.1 | 0.0039 | 2026-10-29 | Gumroad before 2026.07.06.2 contains a broken access control vulnerability in the Purchase | |
CVE-2026-59807 |
high | 8.9 | 0.0037 | 2026-10-29 | Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that a | |
CVE-2026-59822 |
high | 8.8 | 0.0084 | 2026-10-29 | KEV | BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HT |
CVE-2026-59935 |
high | 8.7 | 0.0062 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can | |
CVE-2026-59936 |
high | 8.7 | 0.0062 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can | |
CVE-2026-8650 |
high | 7.5 | 0.0060 | 2026-10-29 | Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). | |
CVE-2026-8651 |
high | 7.5 | 0.0037 | 2026-10-29 | Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer (HTTPS | |
CVE-2026-8800 |
high | 8.8 | 0.0037 | 2026-10-29 | Incorrect Authorization vulnerability in Progress MOVEit Transfer (Audit User module). Th | |
CVE-2026-15163 |
high | 7.5 | 0.0033 | 2026-10-29 | Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 | |
CVE-2026-15169 |
high | 7.5 | 0.0027 | 2026-10-29 | UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows de | |
CVE-2026-35210 |
high | 7.1 | 0.0035 | 2026-10-29 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and ob | |
CVE-2026-49866 |
high | 7.5 | 0.0063 | 2026-10-29 | libp2p is a JavaScript Implementation of libp2p networking stack. Prior to 16.0.0, @libp2p | |
CVE-2026-54528 |
high | 7.1 | 0.0041 | 2026-10-29 | JupyterLab Git is a Git extension for JupyterLab. Prior to 0.54.0, jupyterlab-git uses fnm | |
CVE-2026-54591 |
high | 8.1 | 0.0049 | 2026-10-29 | AsyncSSH is a Python package which provides an asynchronous client and server implementati | |
CVE-2026-55195 |
high | 8.7 | 0.0032 | 2026-10-29 | py7zr is a Python-based library and utility to support 7zip archive compression, decompres | |
CVE-2026-55206 |
high | 8.7 | 0.0027 | 2026-10-29 | py7zr is a Python-based library and utility to support 7zip archive compression, decompres | |
CVE-2026-55596 |
high | 8.7 | 0.0031 | 2026-10-29 | Plate is a rich-text editor with AI and shadcn/ui. From 53.0.0 until 53.1.4, the media emb | |
CVE-2026-56669 |
high | 7.5 | 0.0063 | 2026-10-29 | Elysia is a Typescript framework for request validation, type inference, OpenAPI documenta | |
CVE-2026-57480 |
high | 8.7 | 0.0059 | 2026-10-29 | Parse Server is an open source backend that can be deployed to any infrastructure that can | |
CVE-2026-58208 |
high | 7.5 | 0.0060 | 2026-10-29 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging | |
CVE-2026-58525 |
high | 8.2 | 0.0051 | 2026-10-29 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-59818 |
high | 8.1 | 0.0043 | 2026-10-29 | etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.3 | |
CVE-2026-60105 |
high | 7.7 | 0.0151 | 2026-10-29 | Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetch | |
CVE-2026-10037 |
high | 8.8 | 0.0018 | 2026-10-29 | A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar | |
CVE-2026-44025 |
high | 7.5 | 0.0047 | 2026-10-29 | Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, | |
CVE-2026-44160 |
high | 7.5 | 0.0062 | 2026-10-29 | Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, | |
CVE-2026-44161 |
high | 7.2 | 0.0044 | 2026-10-29 | Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, | |
CVE-2026-55470 |
high | 7.5 | 0.0068 | 2026-10-29 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperab | |
CVE-2026-55471 |
high | 8.7 | 0.0057 | 2026-10-29 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperab | |
CVE-2026-55830 |
high | 8.3 | 0.0029 | 2026-10-29 | RestrictedPython is a tool that helps to define a subset of the Python language which allo | |
CVE-2026-55849 |
high | 8.5 | 0.0024 | 2026-10-29 | @cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. F | |
CVE-2026-55878 |
high | 7.8 | 0.0019 | 2026-10-29 | Symfony UX is a JavaScript ecosystem for Symfony. From 2.32.0 before 2.36.1 and from 3.0.0 | |
CVE-2026-15107 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in IndexedDB in Google Chrome prior to 150.0.7871.115 allowed a remote atta | |
CVE-2026-15110 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in Extensions in Google Chrome prior to 150.0.7871.115 allowed an attacker | |
CVE-2026-15111 |
high | 7.5 | 0.0030 | 2026-10-29 | Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker | |
CVE-2026-15112 |
high | 8.8 | 0.0034 | 2026-10-29 | Use after free in Ozone in Google Chrome prior to 150.0.7871.115 allowed a remote attacker | |
CVE-2026-15114 |
high | 8.8 | 0.0032 | 2026-10-29 | Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a | |
CVE-2026-15116 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Actor in Google Chrome prior to 150.0.7871.115 allowed a remote attacker | |
CVE-2026-15117 |
high | 7.5 | 0.0030 | 2026-10-29 | Use after free in Payments in Google Chrome prior to 150.0.7871.115 allowed a remote attac | |
CVE-2026-15118 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Input in Google Chrome prior to 150.0.7871.115 allowed a remote attacker | |
CVE-2026-15119 |
high | 8.3 | 0.0024 | 2026-10-29 | Race in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker wh | |
CVE-2026-15120 |
high | 8.3 | 0.0030 | 2026-10-29 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remot | |
CVE-2026-15121 |
high | 8.8 | 0.0052 | 2026-10-29 | Use after free in WebRTC in Google Chrome prior to 150.0.7871.115 allowed a remote attacke | |
CVE-2026-15122 |
high | 8.3 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to |