Browse All CVEs
12,160 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-32929 |
high | 8.4 | 0.0020 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_me | |
CVE-2026-21765 |
high | 7.8 | 0.0010 | 2026-10-29 | HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. Th | |
CVE-2026-0634 |
high | 7.8 | 0.0052 | 2026-10-29 | Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps | |
CVE-2026-29139 |
high | 7.8 | 0.0027 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GIN | |
CVE-2026-29140 |
high | 7.7 | 0.0012 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-c | |
CVE-2026-29141 |
high | 7.7 | 0.0021 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject s | |
CVE-2026-29143 |
high | 7.8 | 0.0025 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inn | |
CVE-2026-29144 |
high | 7.8 | 0.0021 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject s | |
CVE-2026-33613 |
high | 8.8 | 0.0050 | 2026-10-29 | Due to the improper neutralisation of special elements used in an OS command, a remote att | |
CVE-2026-33614 |
high | 7.5 | 0.0034 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-33616 |
high | 7.5 | 0.0034 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated blind SQL Injection vuln | |
CVE-2026-32145 |
high | 8.7 | 0.0062 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allo | |
CVE-2026-26928 |
high | 8.7 | 0.0021 | 2026-10-29 | SzafirHost downloads necessary files in the context of the initiating web page. When calle | |
CVE-2026-28805 |
high | 8.8 | 0.0046 | 2026-10-29 | OpenSTAManager is an open source management software for technical assistance and invoicin | |
CVE-2026-29782 |
high | 7.2 | 0.0057 | 2026-10-29 | OpenSTAManager is an open source management software for technical assistance and invoicin | |
CVE-2026-2701 |
high | 8.8 | 0.5454 | 2026-10-29 | Authenticated user can upload a malicious file to the server and execute it, which leads t | |
CVE-2026-2737 |
high | 8.5 | 0.0020 | 2026-10-29 | A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an | |
CVE-2026-31931 |
high | 7.5 | 0.0035 | 2026-10-29 | Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, | |
CVE-2026-31932 |
high | 7.5 | 0.0027 | 2026-10-29 | Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, ineffic | |
CVE-2026-31933 |
high | 7.5 | 0.0035 | 2026-10-29 | Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, special | |
CVE-2026-35168 |
high | 8.8 | 0.0067 | 2026-10-29 | OpenSTAManager is an open source management software for technical assistance and invoicin | |
CVE-2026-3692 |
high | 8.7 | 0.0042 | 2026-10-29 | In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authentica | |
CVE-2026-31934 |
high | 7.5 | 0.0027 | 2026-10-29 | Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, | |
CVE-2026-31935 |
high | 7.5 | 0.0027 | 2026-10-29 | Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, floodin | |
CVE-2026-31937 |
high | 7.5 | 0.0035 | 2026-10-29 | Suricata is a network IDS, IPS and NSM engine. Prior to version 7.0.15, inefficiency in DC | |
CVE-2026-33533 |
high | 7.1 | 0.0033 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.3, t | |
CVE-2026-33544 |
high | 7.7 | 0.0034 | 2026-10-29 | Tinyauth is an authentication and authorization server. Prior to version 5.0.5, all three | |
CVE-2026-33641 |
high | 7.8 | 0.0087 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.3, G | |
CVE-2026-34728 |
high | 8.1 | 0.0069 | 2026-10-29 | phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the MediaBrowserCo | |
CVE-2026-34790 |
high | 7.1 | 0.0063 | 2026-10-29 | Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary fil | |
CVE-2026-34791 |
high | 8.7 | 0.0127 | 2026-10-29 | Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS | |
CVE-2026-5673 |
high | 7.1 | 0.0018 | 2026-10-29 | A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists wit | |
CVE-2026-26026 |
high | 7.2 | 0.1153 | 2026-10-29 | GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, tem | |
CVE-2026-29047 |
high | 8.8 | 0.0039 | 2026-10-29 | GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and | |
CVE-2026-34885 |
high | 8.5 | 0.0167 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-21367 |
high | 7.5 | 0.0020 | 2026-10-29 | Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action s | |
CVE-2026-21371 |
high | 7.8 | 0.0010 | 2026-10-29 | Memory Corruption when retrieving output buffer with insufficient size validation. | |
CVE-2026-21372 |
high | 7.8 | 0.0010 | 2026-10-29 | Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy oper | |
CVE-2026-21373 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when accessing an output buffer without validating its size during IOCTL | |
CVE-2026-21374 |
high | 7.8 | 0.0011 | 2026-10-29 | Memory Corruption when processing auxiliary sensor input/output control commands with insu | |
CVE-2026-21375 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when accessing an output buffer without validating its size during IOCTL | |
CVE-2026-21376 |
high | 7.8 | 0.0010 | 2026-10-29 | Memory Corruption when accessing an output buffer without validating its size during IOCTL | |
CVE-2026-21378 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when accessing an output buffer without validating its size during IOCTL | |
CVE-2026-21380 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory. | |
CVE-2026-21381 |
high | 7.5 | 0.0015 | 2026-10-29 | Transient DOS when receiving a service data frame with excessive length during device matc | |
CVE-2026-21382 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when handling power management requests with improperly sized input/outp | |
CVE-2026-33752 |
high | 8.6 | 0.0046 | 2026-10-29 | curl_cffi is the a Python binding for curl. Prior to 0.15.0, curl_cffi does not restrict r | |
CVE-2026-34148 |
high | 7.5 | 0.0055 | 2026-10-29 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. | |
CVE-2026-34444 |
high | 7.9 | 0.0061 | 2026-10-29 | Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute | |
CVE-2026-34588 |
high | 8.6 | 0.0048 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an |