Browse All CVEs
13,098 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-76030 |
high | 8.8 | 0.0020 | 2026-10-30 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote a | |
CVE-2026-76026 |
high | 8.8 | 0.0020 | 2026-10-30 | Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote att | |
CVE-2026-76028 |
high | 8.8 | 0.0020 | 2026-10-30 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote atta | |
CVE-2026-76025 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote atta | |
CVE-2026-119270 |
high | 8.8 | 0.0021 | 2026-10-30 | Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed | |
CVE-2026-119271 |
high | 8.8 | 0.0020 | 2026-10-30 | Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker t | |
CVE-2026-119268 |
high | 8.8 | 0.0020 | 2026-10-30 | Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attac | |
CVE-2026-119269 |
high | 8.8 | 0.0020 | 2026-10-30 | Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-119266 |
high | 8.8 | 0.0020 | 2026-10-30 | Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-119267 |
high | 8.8 | 0.0020 | 2026-10-30 | Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-119264 |
high | 8.8 | 0.0020 | 2026-10-30 | Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacke | |
CVE-2026-119265 |
high | 8.8 | 0.0020 | 2026-10-30 | Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attack | |
CVE-2026-119262 |
high | 8.8 | 0.0024 | 2026-10-30 | Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote a | |
CVE-2026-119260 |
high | 8.8 | 0.0020 | 2026-10-30 | Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-92744 |
high | 8.7 | 0.0026 | 2026-10-29 | Under certain conditions, privilege manager agent allows a remote unauthenticated attacker | |
CVE-2026-107238 |
high | 8.7 | 0.0045 | 2026-10-29 | A vulnerability allowing an authenticated domain user to perform remote code execution (RC | |
CVE-2026-107239 |
high | 8.8 | 0.0065 | 2026-10-29 | A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to pe | |
CVE-2026-58013 |
high | 8.2 | 0.0050 | 2026-10-29 | A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() | |
CVE-2026-58011 |
high | 7.5 | 0.0047 | 2026-10-29 | A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_ti | |
CVE-2026-58012 |
high | 8.2 | 0.0049 | 2026-10-29 | A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function whe | |
CVE-2026-58010 |
high | 8.2 | 0.0049 | 2026-10-29 | A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal functio | |
CVE-2026-16118 |
high | 7.1 | 0.0022 | 2026-10-29 | A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_ma | |
CVE-2026-89058 |
high | 7.4 | 0.0026 | 2026-10-29 | A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("* | |
CVE-2026-119286 |
high | 7.5 | 0.0042 | 2026-10-29 | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 unt | |
CVE-2026-45049 |
high | 8.3 | 0.0033 | 2026-10-29 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cr | |
CVE-2026-119282 |
high | 7.3 | 0.0014 | 2026-10-29 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 | |
CVE-2026-119283 |
high | 7.5 | 0.0023 | 2026-10-29 | joserfc is a Python library that provides an implementation of several JSON Object Signing | |
CVE-2026-61671 |
high | 8.1 | 0.0016 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to the advisory's stated patched | |
CVE-2026-61654 |
high | 8.3 | 0.0038 | 2026-10-29 | Lightdash is an open source business intelligence platform. In affected versions through 0 | |
CVE-2026-61719 |
high | 8.9 | 0.0024 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored cross-site sc | |
CVE-2026-13303 |
high | 8.7 | 0.0022 | 2026-10-29 | HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery | |
CVE-2026-61576 |
high | 8.3 | 0.0045 | 2026-10-29 | Lightdash is an open source business intelligence platform. In affected versions through 0 | |
CVE-2026-119203 |
high | 7.1 | 0.0030 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter | |
CVE-2026-119207 |
high | 7.1 | 0.0030 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consum | |
CVE-2026-119325 |
high | 7.5 | 0.0024 | 2026-10-29 | Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access contro | |
CVE-2026-119205 |
high | 7.1 | 0.0030 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter | |
CVE-2026-119206 |
high | 7.1 | 0.0030 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take e | |
CVE-2026-119204 |
high | 7.1 | 0.0030 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can consum | |
CVE-2026-119209 |
high | 7.1 | 0.0032 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consum | |
CVE-2026-119208 |
high | 7.1 | 0.0030 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consum | |
CVE-2026-90932 |
high | 8.6 | 0.0082 | 2026-10-29 | 1 PoC | LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the c |
CVE-2026-85170 |
high | 7.1 | 0.0040 | 2026-10-29 | n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail (v1) an | |
CVE-2026-85171 |
high | 7.1 | 0.0056 | 2026-10-29 | n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in th | |
CVE-2026-85168 |
high | 7.7 | 0.0083 | 2026-10-29 | 1 PoC | n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerabi |
CVE-2026-85169 |
high | 8.7 | 0.0088 | 2026-10-29 | n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in t | |
CVE-2026-85166 |
high | 7.2 | 0.0036 | 2026-10-29 | n8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the | |
CVE-2026-85165 |
high | 7.2 | 0.0057 | 2026-10-29 | n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free i | |
CVE-2026-72831 |
high | 8.7 | 0.0086 | 2026-10-29 | The Flex Objects plugin (through 1.4.6, tested with Grav 2.0.11) contains an incorrect aut | |
CVE-2026-72825 |
high | 7.2 | 0.0035 | 2026-10-29 | The getgrav/grav-plugin-api plugin before 1.0.13 contains an API-key scope cap bypass in t | |
CVE-2026-72826 |
high | 8.7 | 0.0047 | 2026-10-29 | The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a ne |