Browse All CVEs
11,591 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-5302 |
high | 8.1 | 0.0026 | 2026-10-29 | CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote | |
CVE-2026-5844 |
high | 7.3 | 0.0508 | 2026-10-29 | A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of t | |
CVE-2026-5850 |
high | 8.9 | 0.1510 | 2026-10-29 | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the | |
CVE-2026-5851 |
high | 8.9 | 0.1337 | 2026-10-29 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This impacts | |
CVE-2026-5852 |
high | 8.9 | 0.1351 | 2026-10-29 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the f | |
CVE-2026-5853 |
high | 8.9 | 0.1351 | 2026-10-29 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affec | |
CVE-2026-5854 |
high | 8.9 | 0.1661 | 2026-10-29 | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this is | |
CVE-2026-34184 |
high | 8.8 | 0.0029 | 2026-10-29 | AlanWeb SCADA does not enforce authorization for some directories. This allows an unauthor | |
CVE-2026-34185 |
high | 8.7 | 0.0029 | 2026-10-29 | AlanWeb SCADA is vulnerable to SQL Injection across most scripts and input parameters. Bec | |
CVE-2026-34578 |
high | 8.2 | 0.0042 | 2026-10-29 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.6, OPNsense's LDA | |
CVE-2026-4112 |
high | 7.2 | 0.0061 | 2026-10-29 | Improper neutralization of special elements used in an SQL command (“SQL Injection”) in So | |
CVE-2026-4113 |
high | 7.2 | 0.0036 | 2026-10-29 | An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliance | |
CVE-2026-4116 |
high | 7.2 | 0.0042 | 2026-10-29 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remo | |
CVE-2026-5437 |
high | 7.5 | 0.0064 | 2026-10-29 | An out-of-bounds read vulnerability exists in `DicomStreamReader` during DICOM meta-header | |
CVE-2026-5438 |
high | 7.5 | 0.0048 | 2026-10-29 | A gzip decompression bomb vulnerability exists when Orthanc processes HTTP request with `C | |
CVE-2026-5439 |
high | 7.5 | 0.0043 | 2026-10-29 | A memory exhaustion vulnerability exists in ZIP archive processing. Orthanc automatically | |
CVE-2026-5440 |
high | 7.5 | 0.0057 | 2026-10-29 | A memory exhaustion vulnerability exists in the HTTP server due to unbounded use of the `C | |
CVE-2026-5441 |
high | 7.1 | 0.0014 | 2026-10-29 | An out-of-bounds read vulnerability exists in the `DecodePsmctRle1` function of `DicomImag | |
CVE-2026-5444 |
high | 7.1 | 0.0016 | 2026-10-29 | A heap buffer overflow vulnerability exists in the PAM image parsing logic. When Orthanc p | |
CVE-2026-5959 |
high | 7.5 | 0.0051 | 2026-10-29 | A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8 | |
CVE-2026-33266 |
high | 7.5 | 0.0030 | 2026-10-29 | Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me | |
CVE-2026-34020 |
high | 7.5 | 0.0051 | 2026-10-29 | Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeeting | |
CVE-2026-39843 |
high | 7.7 | 0.0025 | 2026-10-29 | Plane is an an open-source project management tool. From 0.28.0 to before 1.3.0, the remed | |
CVE-2026-39853 |
high | 7.8 | 0.0016 | 2026-10-29 | osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.1 | |
CVE-2026-4878 |
high | 7.0 | 0.0020 | 2026-10-29 | A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time- | |
CVE-2026-39959 |
high | 7.1 | 0.0012 | 2026-10-29 | Tmds.DBus provides .NET libraries for working with D-Bus from .NET. Tmds.DBus and Tmds.DBu | |
CVE-2026-39972 |
high | 7.1 | 0.0034 | 2026-10-29 | Mercure is a protocol for pushing data updates to web browsers and other HTTP clients in a | |
CVE-2026-39974 |
high | 8.5 | 0.0032 | 2026-10-29 | n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehe | |
CVE-2026-39976 |
high | 7.1 | 0.0029 | 2026-10-29 | Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, | |
CVE-2026-40046 |
high | 7.5 | 0.0037 | 2026-10-29 | Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apac | |
CVE-2026-39911 |
high | 8.7 | 0.0054 | 2026-10-29 | Hashgraph Guardian through version 3.5.1, fixed in commit 45fbe2f, contains an unsandboxed | |
CVE-2026-39981 |
high | 8.8 | 0.0132 | 2026-10-29 | AGiXT is a dynamic AI Agent Automation Platform. Prior to 1.9.2, the safe_join() function | |
CVE-2026-40069 |
high | 7.5 | 0.0027 | 2026-10-29 | BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.1.0 to before 0.8.2, BSV::Netw | |
CVE-2026-40070 |
high | 8.1 | 0.0014 | 2026-10-29 | BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.3.1 to before 0.8.2, BSV::Wall | |
CVE-2026-24880 |
high | 7.5 | 0.0070 | 2026-10-29 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerabi | |
CVE-2026-29129 |
high | 7.5 | 0.0026 | 2026-10-29 | Configured cipher preference order not preserved vulnerability in Apache Tomcat. This iss | |
CVE-2026-34483 |
high | 7.5 | 0.0046 | 2026-10-29 | Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component | |
CVE-2026-34487 |
high | 7.5 | 0.0045 | 2026-10-29 | Insertion of Sensitive Information into Log File vulnerability in the cloud membership for | |
CVE-2026-35577 |
high | 8.1 | 0.0018 | 2026-10-29 | Apollo MCP Server is a Model Context Protocol server that exposes GraphQL operations as MC | |
CVE-2026-39977 |
high | 7.1 | 0.0029 | 2026-10-29 | flatpak-builder is a tool to build flatpaks from source. From 1.4.5 to before 1.4.8, the l | |
CVE-2026-4436 |
high | 8.6 | 0.0045 | 2026-10-29 | A low-privileged remote attacker can send Modbus packets to manipulate register values th | |
CVE-2026-5975 |
high | 8.9 | 0.0180 | 2026-10-29 | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. The impacted elem | |
CVE-2026-5976 |
high | 8.9 | 0.0180 | 2026-10-29 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This affects | |
CVE-2026-40093 |
high | 8.1 | 0.0031 | 2026-10-29 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3 | |
CVE-2026-5977 |
high | 8.9 | 0.0211 | 2026-10-29 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the | |
CVE-2026-5978 |
high | 8.9 | 0.0177 | 2026-10-29 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affec | |
CVE-2026-5979 |
high | 7.4 | 0.0069 | 2026-10-29 | A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is | |
CVE-2026-5980 |
high | 7.4 | 0.0068 | 2026-10-29 | A flaw has been found in D-Link DIR-605L 2.13B01. Affected by this issue is the function f | |
CVE-2026-21915 |
high | 8.4 | 0.0224 | 2026-10-29 | A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support In | |
CVE-2026-21916 |
high | 7.0 | 0.0013 | 2026-10-29 | A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Juno |