Browse All CVEs
11,739 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-0073 |
high | 8.8 | 0.0054 | 2026-10-29 | In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual aut | |
CVE-2026-29004 |
high | 7.2 | 0.0037 | 2026-10-29 | BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 | |
CVE-2026-32834 |
high | 8.7 | 0.0045 | 2026-10-29 | Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains a hardcoded | |
CVE-2026-41471 |
high | 8.2 | 0.0035 | 2026-10-29 | The Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains an infor | |
CVE-2026-42084 |
high | 8.1 | 0.0031 | 2026-10-29 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from | |
CVE-2026-42088 |
high | 8.1 | 0.0034 | 2026-10-29 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from | |
CVE-2026-25863 |
high | 8.7 | 0.0045 | 2026-10-29 | Conditional Fields for Contact Form 7 WordPress plugin through version 2.7.2 contains an u | |
CVE-2026-41927 |
high | 8.3 | 0.0040 | 2026-10-29 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overf | |
CVE-2026-7776 |
high | 7.5 | 0.0020 | 2026-10-29 | Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to | |
CVE-2026-7791 |
high | 8.5 | 0.0015 | 2026-10-29 | Improper privilege management in the log rotation mechanism of the Skylight Workspace Conf | |
CVE-2026-44028 |
high | 7.5 | 0.0018 | 2026-10-29 | An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in | |
CVE-2026-35228 |
high | 8.7 | 0.0022 | 2026-10-29 | Vulnerability in the Oracle MCP Server Helper Tool product of Oracle Open Source Projects | |
CVE-2026-7823 |
high | 8.9 | 0.0179 | 2026-10-29 | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is t | |
CVE-2026-43870 |
high | 7.3 | 0.0038 | 2026-10-29 | Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Pat | |
CVE-2023-54345 |
high | 8.7 | 0.0061 | 2026-10-29 | Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPytho | |
CVE-2023-54346 |
high | 8.7 | 0.0031 | 2026-10-29 | WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability t | |
CVE-2023-54347 |
high | 8.7 | 0.0054 | 2026-10-29 | OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers t | |
CVE-2023-54348 |
high | 8.7 | 0.0035 | 2026-10-29 | ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers | |
CVE-2026-6261 |
high | 8.8 | 0.0061 | 2026-10-29 | The Betheme theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, | |
CVE-2026-6918 |
high | 8.7 | 0.0052 | 2026-10-29 | In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JI | |
CVE-2026-7833 |
high | 7.3 | 0.0316 | 2026-10-29 | A weakness has been identified in EFM ipTIME C200 up to 1.092. This vulnerability affects | |
CVE-2026-29168 |
high | 7.3 | 0.0063 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's | |
CVE-2026-7834 |
high | 8.9 | 0.0063 | 2026-10-29 | A security vulnerability has been detected in EFM ipTIME NAS1dual 1.5.24. This issue affec | |
CVE-2026-32689 |
high | 8.7 | 0.0047 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework pho | |
CVE-2026-7841 |
high | 8.8 | 0.0059 | 2026-10-29 | A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWe | |
CVE-2026-43646 |
high | 7.5 | 0.0039 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Wicket. | |
CVE-2026-40562 |
high | 7.5 | 0.0032 | 2026-10-29 | Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header P | |
CVE-2026-41287 |
high | 7.1 | 0.0025 | 2026-10-29 | Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Win | |
CVE-2026-41286 |
high | 7.1 | 0.0025 | 2026-10-29 | Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Win | |
CVE-2026-41288 |
high | 7.3 | 0.0011 | 2026-10-29 | Incorrect permission assignment for a resource in the patch management component of the Wa | |
CVE-2026-6691 |
high | 8.6 | 0.0013 | 2026-10-29 | The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during userna | |
CVE-2026-6787 |
high | 8.5 | 0.0011 | 2026-10-29 | Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows In | |
CVE-2026-6788 |
high | 8.5 | 0.0013 | 2026-10-29 | Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using | |
CVE-2026-20034 |
high | 8.8 | 0.0071 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco Unity Connection could allo | |
CVE-2026-20035 |
high | 7.2 | 0.0030 | 2026-10-29 | A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthent | |
CVE-2026-20167 |
high | 7.7 | 0.0027 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director | |
CVE-2026-20185 |
high | 7.7 | 0.0039 | 2026-10-29 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 3 | |
CVE-2026-21661 |
high | 8.4 | 0.0011 | 2026-10-29 | An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows all | |
CVE-2026-23870 |
high | 7.5 | 0.0153 | 2026-10-29 | A denial of service vulnerability could be triggered by sending specially crafted HTTP req | |
CVE-2026-42503 |
high | 8.8 | 0.0021 | 2026-10-29 | gopls by default communicates via pipe. However, -port and -listen flags are supported as | |
CVE-2026-33079 |
high | 8.7 | 0.0059 | 2026-10-29 | In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial | |
CVE-2026-41934 |
high | 8.7 | 0.0054 | 2026-10-29 | Vvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability | |
CVE-2026-41936 |
high | 8.6 | 0.0034 | 2026-10-29 | Vvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability | |
CVE-2026-41938 |
high | 8.7 | 0.0072 | 2026-10-29 | Vvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the med | |
CVE-2026-7896 |
high | 8.8 | 0.0028 | 2026-10-29 | Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacke | |
CVE-2026-7897 |
high | 7.5 | 0.0031 | 2026-10-29 | Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote a | |
CVE-2026-7898 |
high | 8.8 | 0.0031 | 2026-10-29 | Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a re | |
CVE-2026-7899 |
high | 8.8 | 0.0030 | 2026-10-29 | Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remot | |
CVE-2026-7900 |
high | 8.3 | 0.0024 | 2026-10-29 | Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote att | |
CVE-2026-7901 |
high | 8.8 | 0.0027 | 2026-10-29 | Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote at |