Browse All CVEs
3,590 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-105016 |
critical | 9.8 | 0.0166 | 2026-10-29 | Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute co | |
CVE-2026-69634 |
critical | 9.8 | 0.0095 | 2026-10-29 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute cod | |
CVE-2026-69639 |
critical | 9.8 | 0.0095 | 2026-10-29 | Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execut | |
CVE-2026-70147 |
critical | 9.8 | 0.0107 | 2026-10-29 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized a | |
CVE-2026-70153 |
critical | 9.8 | 0.0107 | 2026-10-29 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized a | |
CVE-2026-70157 |
critical | 9.8 | 0.0106 | 2026-10-29 | Heap-based buffer overflow in Windows System Information Console allows an unauthorized at | |
CVE-2026-85928 |
critical | 9.8 | 0.0063 | 2026-10-29 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthoriz | |
CVE-2026-96864 |
critical | 9.8 | 0.0063 | 2026-10-29 | Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker t | |
CVE-2026-104252 |
critical | 9.8 | 0.0117 | 2026-10-29 | Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 an | |
CVE-2026-105895 |
critical | 9.9 | 0.0071 | 2026-10-29 | Adobe Experience Manager is affected by an Improper Input Validation vulnerability that co | |
CVE-2026-106626 |
critical | 9.1 | 0.0074 | 2026-10-29 | Adobe Experience Manager is affected by an Improper Input Validation vulnerability that co | |
CVE-2026-106629 |
critical | 9.3 | 0.0087 | 2026-10-29 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability | |
CVE-2026-106630 |
critical | 9.3 | 0.0087 | 2026-10-29 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability | |
CVE-2026-93895 |
critical | 9.1 | 0.0039 | 2026-10-29 | IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unau | |
CVE-2026-93909 |
critical | 9.1 | 0.0034 | 2026-10-29 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an | |
CVE-2026-95695 |
critical | 9.1 | 0.0032 | 2026-10-29 | IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remot | |
CVE-2026-110447 |
critical | 9.2 | 0.7331 | 2026-10-29 | KEV 2 PoC | Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform |
CVE-2020-37282 |
critical | 9.3 | 0.0345 | 2026-10-29 | office-converter through 1.0.2 contains an OS command injection vulnerability that allows | |
CVE-2026-110635 |
critical | 9.3 | 0.0252 | 2026-10-29 | webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconv | |
CVE-2026-110640 |
critical | 9.3 | 0.0273 | 2026-10-29 | Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows atta | |
CVE-2026-98432 |
critical | 9.8 | 0.0044 | 2026-10-29 | 9 PoC | In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt a |
CVE-2026-55240 |
critical | 9.1 | 0.0075 | 2026-10-29 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior t | |
CVE-2026-111312 |
critical | 9.2 | 0.0059 | 2026-10-29 | OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability | |
CVE-2026-109219 |
critical | 9.8 | 0.0069 | 2026-10-29 | The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in version 2.4. | |
CVE-2026-57169 |
critical | 9.6 | 0.0030 | 2026-10-29 | Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container ter | |
CVE-2026-111643 |
critical | 9.3 | 0.0058 | 2026-10-29 | Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that all | |
CVE-2026-111663 |
critical | 9.2 | 0.0037 | 2026-10-29 | Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows una | |
CVE-2026-111693 |
critical | 9.3 | 0.0050 | 2026-10-29 | DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability | |
CVE-2026-112005 |
critical | 9.2 | 0.0069 | 2026-10-29 | WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote at | |
CVE-2026-98464 |
critical | 9.3 | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchron | |
CVE-2026-98490 |
critical | 9.8 | 0.0062 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: con | |
CVE-2026-98548 |
critical | 9.8 | 0.0069 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: sctp: discard the res | |
CVE-2026-98549 |
critical | 9.1 | 0.0039 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: tcp: prevent collapsi | |
CVE-2024-4457 |
critical | 9.1 | 0.0042 | 2026-10-29 | The Management Console fails to properly validate input related to the configuration of JD | |
CVE-2026-112296 |
critical | 9.3 | 0.0042 | 2026-10-29 | FlyCms through commit edfdf724 contains a default credentials vulnerability that allows un | |
CVE-2026-107081 |
critical | 9.8 | 0.0049 | 2026-10-29 | SQL injection via identifier injection in the tableName and tableFields POST parameters of | |
CVE-2026-111057 |
critical | 10.0 | 0.0070 | 2026-10-29 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashbo | |
CVE-2026-71988 |
critical | 9.3 | 0.0246 | 2026-10-29 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71989 |
critical | 9.3 | 0.0246 | 2026-10-29 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71990 |
critical | 9.3 | 0.0246 | 2026-10-29 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71991 |
critical | 9.3 | 0.0246 | 2026-10-29 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71992 |
critical | 9.3 | 0.0246 | 2026-10-29 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71993 |
critical | 9.3 | 0.0246 | 2026-10-29 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-66915 |
critical | 10.0 | 0.0082 | 2026-10-29 | Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthentic | |
CVE-2026-28672 |
critical | 9.8 | 0.0263 | 2026-10-29 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulner | |
CVE-2026-32227 |
critical | 9.8 | 0.0069 | 2026-10-29 | SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects . Users a | |
CVE-2026-40920 |
critical | 9.8 | 0.0073 | 2026-10-29 | Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0. Us | |
CVE-2026-42537 |
critical | 9.8 | 0.0129 | 2026-10-29 | Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommend | |
CVE-2026-44416 |
critical | 9.8 | 0.0124 | 2026-10-29 | Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry componen | |
CVE-2026-55799 |
critical | 9.8 | 0.0122 | 2026-10-29 | Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 |