Browse All CVEs
13,100 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-103094 |
high | 7.1 | 0.0027 | 2026-10-29 | ServiceNow has remediated an information disclosure vulnerability that was identified in t | |
CVE-2026-118779 |
high | 7.5 | 0.0056 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-118782 |
high | 7.5 | 0.0013 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-91223 |
high | 8.8 | 0.0039 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-92287 |
high | 8.1 | 0.0035 | 2026-10-29 | Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow vers | |
CVE-2026-108087 |
high | 8.8 | 0.0043 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL | |
CVE-2026-9536 |
high | 7.5 | 0.0031 | 2026-10-29 | A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOf | |
CVE-2026-108086 |
high | 7.5 | 0.0042 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTD | |
CVE-2026-8824 |
high | 7.5 | 0.0031 | 2026-10-29 | A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation fu | |
CVE-2026-9535 |
high | 8.2 | 0.0026 | 2026-10-29 | A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality | |
CVE-2026-42057 |
high | 7.5 | 0.0028 | 2026-10-29 | An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdat | |
CVE-2026-8822 |
high | 7.5 | 0.0031 | 2026-10-29 | A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of | |
CVE-2026-119249 |
high | 7.5 | 0.0034 | 2026-10-29 | A malicious actor with access to the network could exploit a Binding to an Unrestricted IP | |
CVE-2026-41216 |
high | 7.5 | 0.0028 | 2026-10-29 | An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformatio | |
CVE-2026-118772 |
high | 7.5 | 0.0047 | 2026-10-29 | joi is a schema description language and data validator for JavaScript. From 17.1.1 until | |
CVE-2026-119168 |
high | 8.8 | 0.0013 | 2026-10-29 | HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-clien | |
CVE-2026-16453 |
high | 7.1 | 0.0019 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8 | |
CVE-2026-86467 |
high | 8.8 | 0.0026 | 2026-10-29 | Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the a | |
CVE-2026-91226 |
high | 7.5 | 0.0030 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91227 |
high | 7.5 | 0.0024 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91228 |
high | 7.1 | 0.0028 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91229 |
high | 7.5 | 0.0030 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91237 |
high | 7.5 | 0.0038 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-107347 |
high | 8.4 | 0.0013 | 2026-10-29 | HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch p | |
CVE-2026-51905 |
high | 8.8 | 0.0026 | 2026-10-29 | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent | |
CVE-2026-108088 |
high | 7.5 | 0.0046 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerabilit | |
CVE-2026-34485 |
high | 7.8 | 0.0015 | 2026-10-29 | Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low | |
CVE-2026-91217 |
high | 8.6 | 0.0040 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-87743 |
high | 7.5 | 0.0052 | 2026-10-29 | A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discr | |
CVE-2026-80353 |
high | 8.1 | 0.0039 | 2026-10-29 | Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when crea | |
CVE-2026-89009 |
high | 8.8 | 0.0101 | 2026-10-29 | WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an una | |
CVE-2026-93446 |
high | 7.5 | 0.0059 | 2026-10-29 | Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail | |
CVE-2026-88041 |
high | 7.5 | 0.0051 | 2026-10-29 | Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a pr | |
CVE-2026-93479 |
high | 8.1 | 0.0120 | 2026-10-29 | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex | |
CVE-2026-110688 |
high | 7.5 | 0.0049 | 2026-10-29 | Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revali | |
CVE-2026-110687 |
high | 7.5 | 0.0042 | 2026-10-29 | Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during | |
CVE-2026-91794 |
high | 7.8 | 0.0022 | 2026-10-29 | An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Edit | |
CVE-2026-91798 |
high | 8.8 | 0.0015 | 2026-10-29 | A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor | |
CVE-2026-104795 |
high | 8.8 | 0.0016 | 2026-10-29 | The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans | |
CVE-2026-110684 |
high | 8.1 | 0.0045 | 2026-10-29 | Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overload | |
CVE-2026-91213 |
high | 8.8 | 0.0039 | 2026-10-29 | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Mid | |
CVE-2026-91215 |
high | 8.8 | 0.0039 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-118763 |
high | 7.4 | 0.0030 | 2026-10-29 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to | |
CVE-2026-118765 |
high | 7.3 | 0.0014 | 2026-10-29 | Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls Au | |
CVE-2026-110673 |
high | 7.5 | 0.0049 | 2026-10-29 | Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged va | |
CVE-2026-110672 |
high | 7.5 | 0.0049 | 2026-10-29 | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected | |
CVE-2026-119115 |
high | 8.4 | 0.0017 | 2026-10-29 | Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kub | |
CVE-2026-107618 |
high | 8.1 | 0.0015 | 2026-10-29 | `POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides | |
CVE-2026-118761 |
high | 7.5 | 0.0050 | 2026-10-29 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-107049 |
high | 7.5 | 0.0017 | 2026-10-29 | An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user |