Browse All CVEs
13,097 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-119559 |
high | 8.2 | — | 2026-10-30 | OpenLiteSpeed through 1.9.4 contains an authentication bypass vulnerability that allows un | |
CVE-2026-119557 |
high | 8.2 | — | 2026-10-30 | n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks n | |
CVE-2026-119553 |
high | 7.1 | — | 2026-10-30 | Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through | |
CVE-2026-119551 |
high | 7.1 | — | 2026-10-30 | Jellyfin through 12.4 contains an authorization bypass vulnerability in SuggestionsControl | |
CVE-2026-119549 |
high | 7.1 | — | 2026-10-30 | Jellyfin through 12.4 contains a server-side request forgery vulnerability that lets authe | |
CVE-2026-119426 |
high | 7.7 | — | 2026-10-30 | phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows r | |
CVE-2026-119421 |
high | 8.2 | — | 2026-10-30 | Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing aut | |
CVE-2026-119422 |
high | 8.2 | — | 2026-10-30 | Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that all | |
CVE-2026-119420 |
high | 8.7 | — | 2026-10-30 | Lago through 1.55.0 contains an authentication bypass vulnerability that allows organizati | |
CVE-2026-119409 |
high | 8.6 | — | 2026-10-30 | OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticate | |
CVE-2026-119407 |
high | 7.1 | — | 2026-10-30 | Element Web and Element Desktop before 1.12.32 accept guest credentials from URL fragment | |
CVE-2026-119408 |
high | 8.7 | — | 2026-10-30 | n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execu | |
CVE-2026-119379 |
high | 8.5 | — | 2026-10-30 | SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vuln | |
CVE-2026-119374 |
high | 8.5 | — | 2026-10-30 | SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete | |
CVE-2026-119373 |
high | 8.5 | — | 2026-10-30 | SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidList | |
CVE-2025-68394 |
high | 8.4 | — | 2026-10-30 | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerabil | |
CVE-2025-68393 |
high | 8.4 | — | 2026-10-30 | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerabil | |
CVE-2026-111505 |
high | 8.8 | — | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization o | |
CVE-2026-101214 |
high | 7.2 | — | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization o | |
CVE-2026-110971 |
high | 7.7 | — | 2026-10-30 | Use of a weak password encoding algorithm in Płatnik software allows a user who obtains en | |
CVE-2026-110972 |
high | 8.6 | — | 2026-10-30 | Płatnik performs client-side authentication. An attacker with access to any application in | |
CVE-2026-101213 |
high | 7.8 | — | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Manage | |
CVE-2026-101210 |
high | 7.2 | — | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization o | |
CVE-2026-110680 |
high | 7.5 | 0.0017 | 2026-10-30 | Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied o | |
CVE-2026-110681 |
high | 8.1 | 0.0017 | 2026-10-30 | Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a | |
CVE-2026-22110 |
high | 8.7 | — | 2026-10-30 | The web server does not check authentication on POST or PUT. An unauthenticated attacker c | |
CVE-2026-22105 |
high | 8.7 | — | 2026-10-30 | Delta UFC500 charging stations derive the default credentials of the Service account from | |
CVE-2026-22109 |
high | 8.4 | — | 2026-10-30 | The shipped WebUI template database retains the factory default passwords for all five acc | |
CVE-2026-81726 |
high | 8.3 | 0.0034 | 2026-10-30 | NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that by | |
CVE-2026-85268 |
high | 8.7 | — | 2026-10-30 | A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Id | |
CVE-2026-14467 |
high | 8.2 | 0.0038 | 2026-10-30 | An information disclosure vulnerability in the Forocoches comments editor that allows an a | |
CVE-2026-59387 |
high | 8.8 | 0.0027 | 2026-10-30 | The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /int | |
CVE-2026-101295 |
high | 7.3 | 0.0014 | 2026-10-30 | Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. Wh | |
CVE-2026-90437 |
high | 7.2 | 0.0019 | 2026-10-30 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Po | |
CVE-2026-97645 |
high | 7.2 | 0.0019 | 2026-10-30 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Li | |
CVE-2026-89435 |
high | 8.8 | 0.0039 | 2026-10-30 | The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & Mo | |
CVE-2026-110732 |
high | 7.5 | 0.0027 | 2026-10-30 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vuln | |
CVE-2026-116622 |
high | 7.2 | 0.0024 | 2026-10-30 | The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Store | |
CVE-2026-114422 |
high | 7.5 | 0.0082 | 2026-10-30 | The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allow | |
CVE-2026-114443 |
high | 7.5 | 0.0013 | 2026-10-30 | The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before | |
CVE-2026-117571 |
high | 8.8 | 0.0017 | 2026-10-30 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitiz | |
CVE-2026-92574 |
high | 8.8 | 0.0065 | 2026-10-30 | A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a mali | |
CVE-2026-104368 |
high | 8.8 | 0.0035 | 2026-10-30 | The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege | |
CVE-2026-103963 |
high | 7.5 | 0.0034 | 2026-10-30 | A flaw was found in glib-networking. When establishing connections using Transport Layer S | |
CVE-2026-43961 |
high | 7.8 | 0.0016 | 2026-10-30 | A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and | |
CVE-2026-20586 |
high | 8.8 | 0.0039 | 2026-10-30 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could | |
CVE-2026-15801 |
high | 8.0 | 0.0048 | 2026-10-30 | A vulnerability was found in CRI-O related to the container checkpoint and restore feature | |
CVE-2026-76031 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-76029 |
high | 8.8 | 0.0020 | 2026-10-30 | Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote atta | |
CVE-2026-76030 |
high | 8.8 | 0.0020 | 2026-10-30 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote a |