Browse All CVEs
13,095 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-6135 |
high | 7.4 | 0.0062 | 2026-10-29 | A weakness has been identified in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the fu | |
CVE-2026-6136 |
high | 7.4 | 0.0054 | 2026-10-29 | A security vulnerability has been detected in Tenda F451 1.0.0.7_cn_svn7958. Impacted is t | |
CVE-2026-6137 |
high | 7.4 | 0.0053 | 2026-10-29 | A vulnerability was detected in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the | |
CVE-2026-6138 |
high | 8.9 | 0.0182 | 2026-10-29 | A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is th | |
CVE-2026-25204 |
high | 7.5 | 0.0030 | 2026-10-29 | Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Scrip | |
CVE-2026-6139 |
high | 8.9 | 0.0182 | 2026-10-29 | A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the | |
CVE-2026-6140 |
high | 8.9 | 0.0220 | 2026-10-29 | A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the funct | |
CVE-2026-28553 |
high | 7.5 | 0.0014 | 2026-10-29 | Vulnerability of improper permission control in the theme setting module. Impact: Successf | |
CVE-2026-34851 |
high | 7.5 | 0.0013 | 2026-10-29 | Race condition vulnerability in the event notification module. Impact: Successful exploita | |
CVE-2026-34853 |
high | 7.5 | 0.0017 | 2026-10-29 | Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this | |
CVE-2026-34856 |
high | 7.5 | 0.0013 | 2026-10-29 | UAF vulnerability in the communication module. Impact: Successful exploitation of this vul | |
CVE-2026-6154 |
high | 8.9 | 0.0182 | 2026-10-29 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. The affected | |
CVE-2026-6155 |
high | 8.9 | 0.0180 | 2026-10-29 | A weakness has been identified in Totolink A7100RU 7.4cu.2313. The impacted element is the | |
CVE-2026-6156 |
high | 8.9 | 0.0182 | 2026-10-29 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. This | |
CVE-2026-6157 |
high | 7.4 | 0.0047 | 2026-10-29 | A vulnerability was detected in Totolink A800R 4.1.2cu.5137_B20200730. This impacts the fu | |
CVE-2026-34854 |
high | 7.1 | 0.0010 | 2026-10-29 | UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerabil | |
CVE-2026-34859 |
high | 7.1 | 0.0008 | 2026-10-29 | UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerabil | |
CVE-2026-35553 |
high | 8.4 | 0.0015 | 2026-10-29 | Bluetooth ACPI Drivers provided by Dynabook Inc. contain a stack-based buffer overflow vul | |
CVE-2026-21010 |
high | 7.8 | 0.0010 | 2026-10-29 | Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local atta | |
CVE-2026-40447 |
high | 7.5 | 0.0017 | 2026-10-29 | Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefi | |
CVE-2026-40436 |
high | 7.5 | 0.0019 | 2026-10-29 | The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the man | |
CVE-2026-6168 |
high | 7.4 | 0.0057 | 2026-10-29 | A flaw has been found in TOTOLINK A7000R up to 9.1.0u.6115. The affected element is the fu | |
CVE-2026-0234 |
high | 7.2 | 0.0023 | 2026-10-29 | An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR a | |
CVE-2026-35337 |
high | 8.8 | 0.0101 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in Apache Storm. Versions Affected: befor | |
CVE-2026-34476 |
high | 7.1 | 0.0048 | 2026-10-29 | Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. Thi | |
CVE-2026-33858 |
high | 8.8 | 0.0059 | 2026-10-29 | Dag Authors, who normally should not be able to execute code in the webserver context coul | |
CVE-2025-66769 |
high | 7.5 | 0.0044 | 2026-10-29 | A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cau | |
CVE-2026-6186 |
high | 7.4 | 0.0061 | 2026-10-29 | A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This vu | |
CVE-2026-32316 |
high | 7.5 | 0.0079 | 2026-10-29 | jq is a command-line JSON processor. An integer overflow vulnerability exists through vers | |
CVE-2026-6194 |
high | 7.4 | 0.0047 | 2026-10-29 | A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulner | |
CVE-2026-6195 |
high | 8.9 | 0.1351 | 2026-10-29 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affec | |
CVE-2026-6196 |
high | 7.4 | 0.0057 | 2026-10-29 | A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeComma | |
CVE-2026-40039 |
high | 7.1 | 0.0034 | 2026-10-29 | Pachno 1.0.6 contains an open redirection vulnerability that allows attackers to redirect | |
CVE-2026-40040 |
high | 8.7 | 0.0047 | 2026-10-29 | Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated | |
CVE-2026-40043 |
high | 7.1 | 0.0038 | 2026-10-29 | Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action | |
CVE-2026-6197 |
high | 7.4 | 0.0055 | 2026-10-29 | A flaw has been found in Tenda F456 1.0.0.5. This vulnerability affects the function formW | |
CVE-2026-6198 |
high | 7.4 | 0.0045 | 2026-10-29 | A vulnerability has been found in Tenda F456 1.0.0.5. This issue affects the function from | |
CVE-2026-6199 |
high | 7.4 | 0.0047 | 2026-10-29 | A vulnerability was found in Tenda F456 1.0.0.5. Impacted is the function fromqossetting o | |
CVE-2026-6200 |
high | 7.4 | 0.0045 | 2026-10-29 | A vulnerability was determined in Tenda F456 1.0.0.5. The affected element is the function | |
CVE-2026-32605 |
high | 7.5 | 0.0046 | 2026-10-29 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol base | |
CVE-2026-32271 |
high | 7.7 | 0.0048 | 2026-10-29 | Craft Commerce is an ecommerce platform for Craft CMS. In versions 4.0.0 through 4.10.2 an | |
CVE-2026-32272 |
high | 8.7 | 0.0030 | 2026-10-29 | Craft Commerce is an ecommerce platform for Craft CMS. In versions 5.0.0 through 5.5.4, an | |
CVE-2026-4786 |
high | 7.0 | 0.0029 | 2026-10-29 | Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation c | |
CVE-2026-5086 |
high | 7.5 | 0.0040 | 2026-10-29 | Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For | |
CVE-2026-34256 |
high | 7.1 | 0.0022 | 2026-10-29 | Due to a missing authorization check in SAP ERP and SAP S/4HANA (Private Cloud and On-Prem | |
CVE-2026-39418 |
high | 7.4 | 0.0020 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, sandbox | |
CVE-2026-39420 |
high | 7.4 | 0.0049 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an incom | |
CVE-2026-39421 |
high | 7.4 | 0.0026 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sa | |
CVE-2026-40287 |
high | 8.4 | 0.0025 | 2026-10-29 | PraisonAI is a multi-agent teams system. Versions 4.5.138 and below are vulnerable to arbi | |
CVE-2026-40315 |
high | 7.2 | 0.0030 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 4.5.133, there is an SQL identifier inje |