Browse All CVEs
3,594 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-32470 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions. | |
CVE-2026-32474 |
critical | 9.9 | 0.0048 | 2026-10-29 | Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions. | |
CVE-2026-59940 |
critical | 9.8 | 0.0081 | 2026-10-29 | Seroval facilitates JS value stringification, including complex structures beyond JSON.str | |
CVE-2026-66627 |
critical | 9.9 | 0.0048 | 2026-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd. GP Pr | |
CVE-2026-73187 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions. | |
CVE-2026-73339 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions. | |
CVE-2026-73341 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions. | |
CVE-2026-73343 |
critical | 10.0 | 0.0086 | 2026-10-29 | Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions. | |
CVE-2026-73355 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions. | |
CVE-2026-73365 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions. | |
CVE-2026-73366 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions. | |
CVE-2026-73376 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions. | |
CVE-2026-73380 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in Popup by Supsystic <= 1.13.0 versions. | |
CVE-2026-73381 |
critical | 9.1 | 0.0055 | 2026-10-29 | Unauthenticated Broken Authentication in Popup by Supsystic <= 1.13.0 versions. | |
CVE-2026-73397 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated Deserialization of untrusted data in Youzify <= 1.3.7 versions. | |
CVE-2026-73996 |
critical | 9.8 | 0.0052 | 2026-10-29 | Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions. | |
CVE-2026-74015 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in Readabler < 2.0.18 versions. | |
CVE-2026-75784 |
critical | 9.3 | 0.0110 | 2026-10-29 | A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is t | |
CVE-2026-12564 |
critical | 9.6 | 0.0035 | 2026-10-29 | A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes | |
CVE-2026-75856 |
critical | 9.2 | 0.0050 | 2026-10-29 | CodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS | |
CVE-2026-75926 |
critical | 9.3 | 0.0028 | 2026-10-29 | Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that c | |
CVE-2026-18963 |
critical | 9.1 | 0.0468 | 2026-10-29 | A flaw was found in the reset-credentials flow of the keycloak-services component, which i | |
CVE-2026-52723 |
critical | 9.1 | 0.0038 | 2026-10-29 | ePA 3.x Integration implements the authorization workflow and writes Medical Information O | |
CVE-2026-57580 |
critical | 9.4 | 0.0059 | 2026-10-29 | authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, an inbound | |
CVE-2026-50161 |
critical | 9.3 | 0.0072 | 2026-10-29 | libre is a generic library for real-time communications with asynchronous input and output | |
CVE-2026-71878 |
critical | 9.2 | 0.0086 | 2026-10-29 | Missing authentication in initial setup functionality left exposed after initial setup is | |
CVE-2026-71879 |
critical | 9.1 | 0.0086 | 2026-10-29 | Missing authentication in initial setup functionality left exposed until first reboot in G | |
CVE-2026-75625 |
critical | 9.1 | 0.0024 | 2026-10-29 | Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 | |
CVE-2026-47606 |
critical | 9.1 | 0.0074 | 2026-10-29 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could | |
CVE-2026-47627 |
critical | 9.8 | 0.0073 | 2026-10-29 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could | |
CVE-2026-52735 |
critical | 9.3 | 0.0051 | 2026-10-29 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block t | |
CVE-2026-67443 |
critical | 9.2 | 0.0069 | 2026-10-29 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and ear | |
CVE-2026-60591 |
critical | 9.1 | 0.0045 | 2026-10-29 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Appli | |
CVE-2026-60672 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component | |
CVE-2026-60696 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component | |
CVE-2026-60698 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component | |
CVE-2026-60702 |
critical | 9.9 | 0.0043 | 2026-10-29 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component | |
CVE-2026-60720 |
critical | 9.9 | 0.0043 | 2026-10-29 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (componen | |
CVE-2026-60721 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (componen | |
CVE-2026-60727 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (componen | |
CVE-2026-60728 |
critical | 9.1 | 0.0049 | 2026-10-29 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (componen | |
CVE-2026-60730 |
critical | 9.9 | 0.0043 | 2026-10-29 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (componen | |
CVE-2026-60737 |
critical | 9.1 | 0.0043 | 2026-10-29 | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (comp | |
CVE-2026-60754 |
critical | 9.1 | 0.0049 | 2026-10-29 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Mark | |
CVE-2026-60782 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File T | |
CVE-2026-60821 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-60858 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (compo | |
CVE-2026-60861 |
critical | 9.6 | 0.0036 | 2026-10-29 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (compon | |
CVE-2026-60905 |
critical | 9.6 | 0.0038 | 2026-10-29 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (compone | |
CVE-2026-60916 |
critical | 9.9 | 0.0037 | 2026-10-29 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middlewa |