Browse All CVEs
13,193 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-13027 |
high | 8.8 | 0.0032 | 2026-10-29 | Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote att | |
CVE-2026-13029 |
high | 7.5 | 0.0025 | 2026-10-29 | Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an a | |
CVE-2026-13031 |
high | 8.8 | 0.0038 | 2026-10-29 | Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker | |
CVE-2026-13033 |
high | 8.8 | 0.0038 | 2026-10-29 | Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827. | |
CVE-2026-13035 |
high | 8.8 | 0.0035 | 2026-10-29 | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remo | |
CVE-2026-13036 |
high | 8.8 | 0.0038 | 2026-10-29 | Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker | |
CVE-2026-13037 |
high | 7.8 | 0.0015 | 2026-10-29 | Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a lo | |
CVE-2026-13038 |
high | 8.8 | 0.0038 | 2026-10-29 | Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a r | |
CVE-2026-53950 |
high | 7.5 | 0.0035 | 2026-10-29 | @tryghost/activitypub is Ghost’s social/federation client app. Prior to 3.1.0, the Activit | |
CVE-2026-23879 |
high | 8.0 | 0.0050 | 2026-10-29 | py7zr is a Python-based library and utility to support 7zip archive compression, decompres | |
CVE-2026-55583 |
high | 7.6 | 0.0023 | 2026-10-29 | Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.9.0, | |
CVE-2026-13201 |
high | 7.3 | 0.0031 | 2026-10-29 | A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow f | |
CVE-2026-1840 |
high | 8.7 | 0.0071 | 2026-10-29 | The Aclara Metrum Cellular Web Interface is vulnerable to unauthorized access due to the a | |
CVE-2026-33235 |
high | 7.7 | 0.0037 | 2026-10-29 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous | |
CVE-2026-45677 |
high | 8.7 | 0.0068 | 2026-10-29 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior t | |
CVE-2026-45687 |
high | 8.5 | 0.0034 | 2026-10-29 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior t | |
CVE-2026-7539 |
high | 7.3 | 0.0013 | 2026-10-29 | A potential security vulnerability has been identified in the HP Accessory WMI Provider in | |
CVE-2026-10043 |
high | 7.8 | 0.0055 | 2026-10-29 | MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability. T | |
CVE-2026-47110 |
high | 7.1 | 0.0055 | 2026-10-29 | Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows | |
CVE-2026-50189 |
high | 8.9 | 0.0049 | 2026-10-29 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1 | |
CVE-2026-52794 |
high | 7.5 | 0.0054 | 2026-10-29 | Sentry is an error tracking and performance monitoring tool. From 24.4.0 until 26.5.2, a R | |
CVE-2026-54066 |
high | 7.5 | 0.0217 | 2026-10-29 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch f | |
CVE-2026-54070 |
high | 7.1 | 0.0030 | 2026-10-29 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, renderPacka | |
CVE-2026-54759 |
high | 8.7 | 0.0033 | 2026-10-29 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, Lute's HTML | |
CVE-2026-55759 |
high | 7.4 | 0.0032 | 2026-10-29 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior t | |
CVE-2026-55762 |
high | 8.1 | 0.0047 | 2026-10-29 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior t | |
CVE-2026-9776 |
high | 7.5 | 0.0185 | 2026-10-29 | ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vuln | |
CVE-2026-9777 |
high | 7.2 | 0.0223 | 2026-10-29 | ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability. This vulner | |
CVE-2026-9778 |
high | 7.2 | 0.0223 | 2026-10-29 | ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This | |
CVE-2026-9779 |
high | 7.2 | 0.0068 | 2026-10-29 | ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote | |
CVE-2025-60467 |
high | 7.5 | 0.0074 | 2026-10-29 | A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_ | |
CVE-2026-7569 |
high | 8.8 | 0.0094 | 2026-10-29 | Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. | |
CVE-2026-7570 |
high | 8.8 | 0.0095 | 2026-10-29 | Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. Thi | |
CVE-2026-8659 |
high | 8.8 | 0.0129 | 2026-10-29 | OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows | |
CVE-2026-8663 |
high | 8.8 | 0.0129 | 2026-10-29 | OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows aut | |
CVE-2026-9780 |
high | 8.8 | 0.0094 | 2026-10-29 | Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability. | |
CVE-2026-9781 |
high | 8.8 | 0.0095 | 2026-10-29 | Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability. Thi | |
CVE-2026-9782 |
high | 8.8 | 0.0095 | 2026-10-29 | Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability. T | |
CVE-2026-9783 |
high | 8.8 | 0.0095 | 2026-10-29 | Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability | |
CVE-2026-9784 |
high | 8.8 | 0.0095 | 2026-10-29 | Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability. T | |
CVE-2026-9785 |
high | 8.8 | 0.0095 | 2026-10-29 | Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability. T | |
CVE-2026-9786 |
high | 8.8 | 0.0095 | 2026-10-29 | Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. Thi | |
CVE-2026-9787 |
high | 8.8 | 0.0549 | 2026-10-29 | Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. | |
CVE-2026-9155 |
high | 8.8 | 0.0160 | 2026-10-29 | OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows aut | |
CVE-2026-8664 |
high | 8.8 | 0.0129 | 2026-10-29 | OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows | |
CVE-2026-8658 |
high | 8.8 | 0.0129 | 2026-10-29 | OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows | |
CVE-2026-13311 |
high | 8.7 | 0.0036 | 2026-10-29 | shell-quote prior to 1.8.5 finalizes parsed tokens in parse() using Array.prototype.concat | |
CVE-2026-12244 |
high | 8.7 | 0.0049 | 2026-10-29 | If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with | |
CVE-2026-12245 |
high | 8.7 | 0.0046 | 2026-10-29 | NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections | |
CVE-2026-12246 |
high | 7.2 | 0.0044 | 2026-10-29 | NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength la |