Browse All CVEs
13,190 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-27366 |
high | 7.5 | 0.0031 | 2026-10-29 | Unauthenticated Broken Access Control in MainWP Child <= 6.1.1 versions. | |
CVE-2026-2815 |
high | 8.4 | 0.0025 | 2026-10-29 | Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable k | |
CVE-2026-46732 |
high | 7.0 | 0.0010 | 2026-10-29 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurren | |
CVE-2026-46733 |
high | 7.8 | 0.0015 | 2026-10-29 | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Impr | |
CVE-2026-46734 |
high | 7.8 | 0.0009 | 2026-10-29 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper | |
CVE-2026-47145 |
high | 7.1 | 0.0044 | 2026-10-29 | In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that | |
CVE-2026-47146 |
high | 7.1 | 0.0044 | 2026-10-29 | In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that | |
CVE-2026-47147 |
high | 7.1 | 0.0040 | 2026-10-29 | In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser in | |
CVE-2026-47148 |
high | 7.1 | 0.0044 | 2026-10-29 | In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeate | |
CVE-2026-47149 |
high | 7.1 | 0.0044 | 2026-10-29 | In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identifiers can | |
CVE-2026-47150 |
high | 7.1 | 0.0038 | 2026-10-29 | In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out | |
CVE-2026-47151 |
high | 7.1 | 0.0038 | 2026-10-29 | In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-o | |
CVE-2026-47152 |
high | 7.1 | 0.0044 | 2026-10-29 | In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the | |
CVE-2026-47153 |
high | 7.1 | 0.0044 | 2026-10-29 | In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can terminate the | |
CVE-2026-47154 |
high | 7.1 | 0.0044 | 2026-10-29 | In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of | |
CVE-2026-49506 |
high | 7.2 | 0.0087 | 2026-10-29 | Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation | |
CVE-2026-4526 |
high | 7.1 | 0.0044 | 2026-10-29 | In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds r | |
CVE-2026-54821 |
high | 7.4 | 0.0028 | 2026-10-29 | Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.3.1 versions. | |
CVE-2026-54822 |
high | 8.5 | 0.0036 | 2026-10-29 | Subscriber SQL Injection in SALESmanago & Leadoo <= 3.11.2 versions. | |
CVE-2026-54828 |
high | 7.5 | 0.0035 | 2026-10-29 | Unauthenticated Broken Access Control in Motors <= 1.4.109 versions. | |
CVE-2026-54829 |
high | 7.5 | 0.0032 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-54830 |
high | 7.5 | 0.0035 | 2026-10-29 | Unauthenticated Broken Access Control in Five Star Restaurant Reservations <= 2.7.19 versi | |
CVE-2026-54838 |
high | 8.5 | 0.0036 | 2026-10-29 | Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions. | |
CVE-2026-54841 |
high | 7.5 | 0.0042 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions. | |
CVE-2026-54842 |
high | 8.1 | 0.0035 | 2026-10-29 | Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrect | |
CVE-2026-54844 |
high | 7.5 | 0.0035 | 2026-10-29 | Unauthenticated Broken Access Control in CheckView Automated Testing <= 2.1.0 versions. | |
CVE-2026-54845 |
high | 8.1 | 0.0047 | 2026-10-29 | Unauthenticated Local File Inclusion in MDTF <= 1.3.8 versions. | |
CVE-2026-54848 |
high | 8.3 | 0.0032 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal APIExperts S | |
CVE-2026-56005 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-56014 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-56042 |
high | 7.1 | 0.0025 | 2026-10-29 | Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 vers | |
CVE-2026-56053 |
high | 8.8 | 0.0052 | 2026-10-29 | Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions. | |
CVE-2026-56054 |
high | 7.7 | 0.0047 | 2026-10-29 | Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions. | |
CVE-2026-56071 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions. | |
CVE-2026-56122 |
high | 8.7 | 0.0055 | 2026-10-29 | Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows | |
CVE-2026-46735 |
high | 7.8 | 0.0082 | 2026-10-29 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper | |
CVE-2026-12844 |
high | 7.5 | 0.0066 | 2026-10-29 | List::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairw | |
CVE-2026-54036 |
high | 8.1 | 0.0038 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-55477 |
high | 7.2 | 0.0062 | 2026-10-29 | 3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authentica | |
CVE-2026-9716 |
high | 8.7 | 0.0046 | 2026-10-29 | CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service | |
CVE-2026-9717 |
high | 8.6 | 0.0173 | 2026-10-29 | CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') v | |
CVE-2026-13351 |
high | 7.5 | 0.0049 | 2026-10-29 | Zephyr's IPv6 network stack can be prevented from receiving or processing future incoming | |
CVE-2026-45233 |
high | 7.2 | 0.0090 | 2026-10-29 | HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged | |
CVE-2026-54040 |
high | 7.1 | 0.0026 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-55092 |
high | 7.0 | 0.0044 | 2026-10-29 | Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it use | |
CVE-2026-49839 |
high | 7.1 | 0.0016 | 2026-10-29 | jq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can turn a handled ove | |
CVE-2026-12897 |
high | 8.4 | 0.0018 | 2026-10-29 | Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Rea | |
CVE-2026-12921 |
high | 8.4 | 0.0019 | 2026-10-29 | In AzeoTech DAQFactory versions 21.1 and prior, a Use After Free vulnerability can be expl | |
CVE-2026-46606 |
high | 7.8 | 0.0019 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glanc | |
CVE-2026-46607 |
high | 7.8 | 0.0019 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/o |