Browse All CVEs
13,100 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-5285 |
high | 8.8 | 0.0040 | 2026-10-29 | Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker | |
CVE-2026-5286 |
high | 8.8 | 0.0039 | 2026-10-29 | Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker | |
CVE-2026-5287 |
high | 8.8 | 0.0051 | 2026-10-29 | Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker t | |
CVE-2026-5292 |
high | 8.8 | 0.0032 | 2026-10-29 | Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote | |
CVE-2026-27101 |
high | 7.2 | 0.0040 | 2026-10-29 | Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5 | |
CVE-2026-28265 |
high | 7.1 | 0.0012 | 2026-10-29 | PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged | |
CVE-2026-23898 |
high | 8.6 | 0.0046 | 2026-10-29 | Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupda | |
CVE-2026-23899 |
high | 8.6 | 0.0041 | 2026-10-29 | An improper access check allows unauthorized access to webservice endpoints. | |
CVE-2026-22767 |
high | 7.3 | 0.0017 | 2026-10-29 | Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulne | |
CVE-2026-22768 |
high | 7.3 | 0.0013 | 2026-10-29 | Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical | |
CVE-2026-34430 |
high | 8.6 | 0.0041 | 2026-10-29 | ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability | |
CVE-2026-35091 |
high | 8.2 | 0.0088 | 2026-10-29 | A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return | |
CVE-2026-35092 |
high | 7.5 | 0.0101 | 2026-10-29 | A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message | |
CVE-2026-3877 |
high | 7.3 | 0.0019 | 2026-10-29 | A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality | |
CVE-2026-35099 |
high | 7.4 | 0.0013 | 2026-10-29 | Lakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant local priv | |
CVE-2026-4828 |
high | 8.2 | 0.0026 | 2026-10-29 | Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 a | |
CVE-2026-4924 |
high | 8.2 | 0.0033 | 2026-10-29 | Improper authentication in the two-factor authentication (2FA) feature in Devolutions Se | |
CVE-2026-20094 |
high | 8.8 | 0.0114 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20151 |
high | 7.3 | 0.0027 | 2026-10-29 | A vulnerability in the web interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) | |
CVE-2026-20155 |
high | 8.0 | 0.0027 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Networ | |
CVE-2026-34076 |
high | 7.4 | 0.0032 | 2026-10-29 | Clerk JavaScript is the official JavaScript repository for Clerk authentication. In @clerk | |
CVE-2026-34376 |
high | 7.5 | 0.0038 | 2026-10-29 | PdfDing is a selfhosted PDF manager, viewer and editor offering a seamless user experience | |
CVE-2026-35000 |
high | 7.1 | 0.0029 | 2026-10-29 | ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in t | |
CVE-2026-34455 |
high | 8.7 | 0.0036 | 2026-10-29 | Hi.Events is an open-source event management and ticket selling platform. From version 0.8 | |
CVE-2026-34746 |
high | 7.7 | 0.0031 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34747 |
high | 8.2 | 0.0032 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34748 |
high | 8.7 | 0.0029 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-1345 |
high | 7.3 | 0.0036 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-34531 |
high | 8.2 | 0.0034 | 2026-10-29 | Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prio | |
CVE-2026-34543 |
high | 8.7 | 0.0050 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34544 |
high | 8.4 | 0.0025 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34545 |
high | 8.4 | 0.0063 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34561 |
high | 8.4 | 0.0023 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34570 |
high | 8.8 | 0.0051 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34572 |
high | 8.8 | 0.0051 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-3987 |
high | 8.6 | 0.0069 | 2026-10-29 | A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may | |
CVE-2026-32925 |
high | 8.4 | 0.0021 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CV7B | |
CVE-2026-32926 |
high | 8.4 | 0.0020 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFil | |
CVE-2026-32927 |
high | 8.4 | 0.0020 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInI | |
CVE-2026-32928 |
high | 8.4 | 0.0021 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSav | |
CVE-2026-32929 |
high | 8.4 | 0.0020 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_me | |
CVE-2026-21765 |
high | 7.8 | 0.0010 | 2026-10-29 | HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. Th | |
CVE-2026-0634 |
high | 7.8 | 0.0053 | 2026-10-29 | Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps | |
CVE-2026-29139 |
high | 7.8 | 0.0028 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GIN | |
CVE-2026-29140 |
high | 7.7 | 0.0012 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-c | |
CVE-2026-29141 |
high | 7.7 | 0.0022 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject s | |
CVE-2026-29143 |
high | 7.8 | 0.0025 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inn | |
CVE-2026-29144 |
high | 7.8 | 0.0022 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject s | |
CVE-2026-33613 |
high | 8.8 | 0.0052 | 2026-10-29 | Due to the improper neutralisation of special elements used in an OS command, a remote att | |
CVE-2026-33614 |
high | 7.5 | 0.0034 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil |