Browse All CVEs
13,193 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-15123 |
high | 8.8 | 0.0034 | 2026-10-29 | Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a rem | |
CVE-2026-15125 |
high | 8.8 | 0.0040 | 2026-10-29 | Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a r | |
CVE-2026-15126 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker | |
CVE-2026-15129 |
high | 8.8 | 0.0034 | 2026-10-29 | Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker | |
CVE-2026-15132 |
high | 8.8 | 0.0045 | 2026-10-29 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker | |
CVE-2026-15133 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote | |
CVE-2026-54499 |
high | 7.5 | 0.0052 | 2026-10-29 | Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and | |
CVE-2026-41857 |
high | 7.1 | 0.0023 | 2026-10-29 | A compromised or malicious BOSH Director can execute arbitrary shell commands on the opera | |
CVE-2026-5523 |
high | 8.8 | 0.0044 | 2026-10-29 | The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versi | |
CVE-2026-47826 |
high | 8.5 | 0.0054 | 2026-10-29 | The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to | |
CVE-2026-47828 |
high | 8.9 | 0.0029 | 2026-10-29 | During bosh create-env and bosh delete-env, the CLI uploads compiled CPI packages and rend | |
CVE-2026-47829 |
high | 7.7 | 0.0042 | 2026-10-29 | Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary Open | |
CVE-2026-47830 |
high | 8.5 | 0.0015 | 2026-10-29 | Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell | |
CVE-2026-47831 |
high | 7.7 | 0.0032 | 2026-10-29 | Use of a cryptographically weak random number generator in the GenerateRandomPassword func | |
CVE-2026-31985 |
high | 8.3 | 0.0020 | 2026-10-29 | When the upstream Guardian or CMC was configured in the Remote Collector via n2os-tui, the | |
CVE-2026-57111 |
high | 7.5 | 0.0035 | 2026-10-29 | Permissive Cross-Origin Resource Sharing (CORS) in the REST API (helix-rest, org.apache.he | |
CVE-2026-1989 |
high | 7.5 | 0.0043 | 2026-10-29 | Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technolog | |
CVE-2026-56458 |
high | 7.5 | 0.0026 | 2026-10-29 | HCL DevOps Deploy uses Cross-Origin Resource Sharing (CORS) which could allow an attacker | |
CVE-2026-12593 |
high | 8.7 | 0.0043 | 2026-10-29 | The implementation of an internal and undocumented Dashboard API endpoint (POST /api/users | |
CVE-2026-4256 |
high | 8.2 | 0.0035 | 2026-10-29 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulne | |
CVE-2026-54798 |
high | 7.1 | 0.0041 | 2026-10-29 | A vulnerability has been identified in CPCI85 Central Processing/Communication (All versio | |
CVE-2026-54799 |
high | 8.4 | 0.0018 | 2026-10-29 | A vulnerability has been identified in CPCI85 Central Processing/Communication (All versio | |
CVE-2026-54801 |
high | 8.6 | 0.0062 | 2026-10-29 | A vulnerability has been identified in CPCI85 Central Processing/Communication (All versio | |
CVE-2026-60108 |
high | 8.7 | 0.0079 | 2026-10-29 | Zeek before 8.0.9 contains an uncontrolled memory consumption vulnerability in the FTP ana | |
CVE-2026-60109 |
high | 8.7 | 0.0092 | 2026-10-29 | Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protoc | |
CVE-2026-11404 |
high | 8.7 | 0.0061 | 2026-10-29 | Cesanta Mongoose before 7.22 contains an out-of-bounds read in the built-in TLS server fun | |
CVE-2026-59206 |
high | 7.1 | 0.0066 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1 | |
CVE-2026-59207 |
high | 7.1 | 0.0045 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 2.27.4 and 2.28.1, the AI Age | |
CVE-2026-59208 |
high | 7.6 | 0.0027 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 2.27.4 and from 2.28.0 prior | |
CVE-2026-15308 |
high | 8.7 | 0.0064 | 2026-10-29 | The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service thro | |
CVE-2026-51602 |
high | 7.5 | 0.0046 | 2026-10-29 | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmwar | |
CVE-2026-51603 |
high | 7.5 | 0.0046 | 2026-10-29 | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmwar | |
CVE-2026-51604 |
high | 7.5 | 0.0047 | 2026-10-29 | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmwar | |
CVE-2026-51605 |
high | 7.5 | 0.0047 | 2026-10-29 | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmwar | |
CVE-2026-51606 |
high | 7.5 | 0.0039 | 2026-10-29 | An improper input handling vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V | |
CVE-2026-53987 |
high | 7.3 | 0.0050 | 2026-10-29 | The Tag plugin for GLPI 11 before 2.14.4 stores the tag name without HTML sanitization and | |
CVE-2026-58459 |
high | 8.4 | 0.0286 | 2026-10-29 | gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnera | |
CVE-2026-54904 |
high | 8.2 | 0.0067 | 2026-10-29 | concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::Atomic | |
CVE-2026-48703 |
high | 7.8 | 0.0025 | 2026-10-29 | Warp is an agentic development environment. From 0.2025.04.09.08.11.stable_00 until 0.2026 | |
CVE-2026-48704 |
high | 8.8 | 0.0044 | 2026-10-29 | Warp is an agentic development environment. From 0.2023.10.24.08.03.stable_00 until 0.2026 | |
CVE-2026-48719 |
high | 8.0 | 0.0132 | 2026-10-29 | Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026 | |
CVE-2026-48720 |
high | 8.8 | 0.0044 | 2026-10-29 | Warp is an agentic development environment. From 0.2025.03.05.08.02.stable_00 until 0.2026 | |
CVE-2026-48721 |
high | 8.6 | 0.0022 | 2026-10-29 | Warp is an agentic development environment. From 0.2025.10.08.08.12.stable_00 until 0.2026 | |
CVE-2026-48725 |
high | 8.1 | 0.0038 | 2026-10-29 | Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026 | |
CVE-2026-48731 |
high | 7.8 | 0.0089 | 2026-10-29 | Warp is an agentic development environment. From 0.2024.02.20.08.01.stable_01 until 0.2026 | |
CVE-2026-48732 |
high | 8.8 | 0.0140 | 2026-10-29 | Warp is an agentic development environment. From 0.2023.03.21.08.02.stable_00 until 0.2026 | |
CVE-2026-49851 |
high | 8.7 | 0.0052 | 2026-10-29 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is | |
CVE-2026-54699 |
high | 7.7 | 0.0074 | 2026-10-29 | Warp is an agentic development environment. From 0.2024.03.12.08.02.stable_01 until 0.2026 | |
CVE-2026-12760 |
high | 7.1 | 0.0036 | 2026-10-29 | A denial-of-service (DoS) vulnerability has been identified in Tapo C200 v3 in the network | |
CVE-2026-13025 |
high | 8.3 | 0.0030 | 2026-10-29 | Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who ha |