Browse All CVEs
1,813 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-109823 |
low | 2.3 | 0.0037 | 2026-10-29 | An attacker can read the name of filesystem paths of your application present via Tidewave | |
CVE-2026-117510 |
low | 2.1 | 0.0049 | 2026-10-29 | A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is th | |
CVE-2026-116673 |
low | 3.3 | 0.0013 | 2026-10-29 | systeminformation is a System and OS information library for node.js. Prior to 5.33.14, th | |
CVE-2026-57189 |
low | 2.3 | 0.0074 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. In affected depl | |
CVE-2026-57198 |
low | 2.3 | 0.0083 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. In affected depl | |
CVE-2026-67400 |
low | 3.5 | 0.0018 | 2026-10-29 | A missing token type check allowed to retrieve more additional information about the WOPI | |
CVE-2026-77171 |
low | 3.5 | 0.0016 | 2026-10-29 | A public shared collective always allowed recipients of the link to create pages. | |
CVE-2026-82983 |
low | 3.3 | 0.0011 | 2026-10-29 | The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not v | |
CVE-2026-108311 |
low | 2.7 | 0.0024 | 2026-10-29 | Tanium addressed an insufficient logging vulnerability in Tanium Server. | |
CVE-2026-108330 |
low | 3.6 | 0.0013 | 2026-10-29 | Tanium addressed an information disclosure vulnerability in Threat Response Client Extensi | |
CVE-2026-108331 |
low | 3.3 | 0.0014 | 2026-10-29 | Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. | |
CVE-2026-108333 |
low | 2.5 | 0.0013 | 2026-10-29 | Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. | |
CVE-2026-103995 |
low | 2.0 | 0.0036 | 2026-10-29 | Response body and chunk parsing would handle non-hex or negative integers incorrectly whic | |
CVE-2026-116687 |
low | 3.1 | 0.0025 | 2026-10-29 | CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 u | |
CVE-2026-116696 |
low | 3.3 | 0.0011 | 2026-10-29 | russh is a Rust SSH client and server library that includes an SSH agent protocol implemen | |
CVE-2026-116775 |
low | 2.3 | 0.0029 | 2026-10-29 | pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and | |
CVE-2026-57199 |
low | 2.3 | 0.0048 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-118129 |
low | 2.1 | 0.0034 | 2026-10-29 | A vulnerability was found in jeremyckahn Chitchatter up to f82538633813c854a81a8b2112a2f6b | |
CVE-2026-106647 |
low | 3.8 | 0.0019 | 2026-10-29 | The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not scope a contact | |
CVE-2026-110507 |
low | 2.7 | 0.0024 | 2026-10-29 | The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not restrict the query | |
CVE-2026-111032 |
low | 3.8 | 0.0019 | 2026-10-29 | The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly verify authorizati | |
CVE-2026-111961 |
low | 3.8 | 0.0019 | 2026-10-29 | The Royal MCP WordPress plugin before 1.5.10 does not perform an object-level permission | |
CVE-2026-113494 |
low | 2.7 | 0.0024 | 2026-10-29 | The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership | |
CVE-2026-86401 |
low | 2.7 | 0.0019 | 2026-10-29 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through | |
CVE-2026-90719 |
low | 2.7 | 0.0019 | 2026-10-29 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through | |
CVE-2026-90721 |
low | 3.4 | 0.0012 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 relea | |
CVE-2026-90723 |
low | 2.7 | 0.0019 | 2026-10-29 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through | |
CVE-2026-90724 |
low | 2.7 | 0.0019 | 2026-10-29 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through | |
CVE-2026-101272 |
low | 2.3 | 0.0035 | 2026-10-29 | The mechanism binding files generated during a shredding process to the authentication met | |
CVE-2026-87098 |
low | 3.1 | 0.0018 | 2026-10-29 | Sensitive information disclosure due to improper authorization. The following products are | |
CVE-2026-87100 |
low | 3.6 | 0.0010 | 2026-10-29 | Protection mechanism failure due to missing binary hardening in Linux executables. The fol | |
CVE-2026-21830 |
low | 3.7 | 0.0025 | 2026-10-29 | HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may caus | |
CVE-2026-103394 |
low | 3.7 | 0.0031 | 2026-10-29 | An Improper Initialization vulnerability in the SSR software in Juniper Networks Session S | |
CVE-2026-118608 |
low | 3.5 | 0.0015 | 2026-10-29 | Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information | |
CVE-2026-105612 |
low | 3.5 | 0.0016 | 2026-10-29 | PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read | |
CVE-2026-105615 |
low | 3.5 | 0.0014 | 2026-10-29 | PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privil | |
CVE-2026-118256 |
low | 2.1 | 0.0048 | 2026-10-29 | Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 an | |
CVE-2026-118258 |
low | 3.7 | 0.0028 | 2026-10-29 | i18next-http-backend is a backend layer for i18next that loads translation resources in No | |
CVE-2026-3583 |
low | 3.1 | 0.0026 | 2026-10-29 | When the `allowed_scopes` configuration is enabled, the OAuth2 token introspection mechani | |
CVE-2026-118585 |
low | 2.0 | 0.0020 | 2026-10-29 | A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d1 | |
CVE-2026-54238 |
low | 3.1 | 0.0021 | 2026-10-29 | Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior | |
CVE-2026-113875 |
low | 3.1 | 0.0027 | 2026-10-29 | On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted | |
CVE-2026-115357 |
low | 2.1 | 0.0021 | 2026-10-29 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the | |
CVE-2026-115358 |
low | 2.0 | 0.0019 | 2026-10-29 | OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attacker | |
CVE-2026-115361 |
low | 2.1 | 0.0021 | 2026-10-29 | OpenBao before 2.6.3 contains an ACL bypass vulnerability that silently drops explicit den | |
CVE-2026-115362 |
low | 2.1 | 0.0020 | 2026-10-29 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in | |
CVE-2026-115363 |
low | 2.1 | 0.0013 | 2026-10-29 | OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 contains an information disclosure vulne | |
CVE-2026-115364 |
low | 2.1 | 0.0032 | 2026-10-29 | OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop | |
CVE-2026-115366 |
low | 2.0 | 0.0018 | 2026-10-29 | OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allo | |
CVE-2026-115369 |
low | 2.1 | 0.0013 | 2026-10-29 | OpenBao from 2.5.0 before 2.6.2 fails to enforce the PKI role allowed_ip_sans_cidr restric |