Browse All CVEs
50,487 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-120634 |
medium | 6.5 | 0.0037 | 2026-11-04 | CGI::Carp versions before 5.00 for Perl leak warnings across requests in persistent enviro | |
CVE-2026-120633 |
medium | 6.1 | 0.0015 | 2026-11-04 | CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_ur | |
CVE-2026-120632 |
medium | 6.5 | 0.0043 | 2026-11-04 | CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex on the XFo | |
CVE-2026-120631 |
high | 7.5 | 0.0050 | 2026-11-04 | CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client | |
CVE-2026-92211 |
high | 7.8 | 0.0019 | 2026-11-04 | Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulner | |
CVE-2026-92193 |
medium | 6.5 | 0.0213 | 2026-11-04 | Quest Foglight for Databases FileServlet External Control of File Path Information Disclos | |
CVE-2026-92190 |
critical | 9.8 | 0.0062 | 2026-11-04 | Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remo | |
CVE-2026-92188 |
critical | 9.8 | 0.0060 | 2026-11-04 | Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Ex | |
CVE-2026-92187 |
high | 8.8 | 0.0127 | 2026-11-04 | Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Cod | |
CVE-2026-121589 |
medium | 6.9 | 0.0042 | 2026-11-04 | A weakness has been identified in spatie url-signer up to 2.1.3. Affected is the function | |
CVE-2026-118628 |
high | 8.2 | 0.0034 | 2026-11-04 | MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability. Thi | |
CVE-2026-118627 |
high | 7.8 | 0.0016 | 2026-11-04 | MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnera | |
CVE-2026-118626 |
medium | 5.4 | 0.0022 | 2026-11-04 | MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability. Th | |
CVE-2026-118625 |
medium | 6.3 | 0.0025 | 2026-11-04 | MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability. This vuln | |
CVE-2026-118624 |
medium | 5.4 | 0.0037 | 2026-11-04 | MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability. Th | |
CVE-2026-118623 |
high | 7.8 | 0.0037 | 2026-11-04 | MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vu | |
CVE-2026-114552 |
medium | 6.5 | 0.0046 | 2026-11-04 | MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulne | |
CVE-2026-114551 |
medium | 5.9 | 0.0028 | 2026-11-04 | MailEnable Auth Cleartext Storage Information Disclosure Vulnerability. This vulnerability | |
CVE-2026-114550 |
high | 8.1 | 0.0084 | 2026-11-04 | 1 PoC | libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Executi |
CVE-2026-114549 |
critical | 9.8 | 0.0058 | 2026-11-04 | NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability. This | |
CVE-2026-63622 |
high | 7.8 | 0.0014 | 2026-11-04 | A flaw was found in libvirt. A local attacker, specifically a process running as the confi | |
CVE-2026-92200 |
high | 7.8 | 0.0011 | 2026-11-04 | Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vu | |
CVE-2026-92199 |
high | 7.8 | 0.0008 | 2026-11-04 | Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escala | |
CVE-2026-92198 |
high | 8.2 | 0.0280 | 2026-11-04 | Quest Foglight for Databases getSource XML External Entity Processing Information Disclosu | |
CVE-2026-92197 |
high | 8.8 | 0.0127 | 2026-11-04 | Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerabi | |
CVE-2026-92196 |
high | 7.2 | 0.0063 | 2026-11-04 | Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Co | |
CVE-2026-92195 |
high | 8.8 | 0.0127 | 2026-11-04 | Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution V | |
CVE-2026-92194 |
high | 8.8 | 0.0127 | 2026-11-04 | Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execu | |
CVE-2026-92192 |
high | 8.8 | 0.0127 | 2026-11-04 | Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vuln | |
CVE-2026-92191 |
high | 8.8 | 0.0051 | 2026-11-04 | Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulne | |
CVE-2026-92189 |
critical | 9.8 | 0.0061 | 2026-11-04 | Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remo | |
CVE-2026-92186 |
high | 8.8 | 0.0127 | 2026-11-04 | Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code E | |
CVE-2026-92185 |
high | 7.2 | 0.0189 | 2026-11-04 | Quest Foglight for Databases AbstractParser XML External Entity Processing Information Dis | |
CVE-2026-121583 |
medium | 5.3 | 0.0029 | 2026-11-03 | A vulnerability was identified in Sanluan PublicCMS 5. This affects the function TradePaym | |
CVE-2026-121582 |
medium | 6.9 | 0.0038 | 2026-11-03 | A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of th | |
CVE-2022-30267 |
high | 8.7 | 0.0031 | 2026-11-03 | Emerson Ovation was found to have no authentication of firmware signing and relies on an | |
CVE-2022-29966 |
critical | 9.3 | 0.0039 | 2026-11-03 | Emerson Ovation has several protocols that have no authentication, which could allow an at | |
CVE-2026-79633 |
high | 8.1 | 0.0029 | 2026-11-03 | vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Mis | |
CVE-2026-79624 |
critical | 9.8 | 0.0039 | 2026-11-03 | Insufficient session expiration vulnerability in Apache Answer. This issue affects Apac | |
CVE-2026-79620 |
medium | 4.3 | 0.0023 | 2026-11-03 | Exposure of sensitive information through data queries vulnerability in Apache Answer. | |
CVE-2026-79613 |
medium | 5.3 | 0.0027 | 2026-11-03 | vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Una | |
CVE-2026-76994 |
high | 7.5 | 0.0036 | 2026-11-03 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. | |
CVE-2026-64945 |
high | 7.5 | 0.0030 | 2026-11-03 | A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The | |
CVE-2026-64944 |
medium | 5.4 | 0.0018 | 2026-11-03 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-108837 |
high | 7.5 | 0.0040 | 2026-11-03 | Allocation of resources without limits or throttling vulnerability in Apache Kylin. Given | |
CVE-2026-108833 |
high | 7.5 | 0.0031 | 2026-11-03 | Default startup profile miss security settings in Apache Kylin. Any deployment has securit | |
CVE-2026-108823 |
high | 7.5 | 0.0034 | 2026-11-03 | Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apac | |
CVE-2026-121539 |
medium | 5.3 | 0.0021 | 2026-11-03 | A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by | |
CVE-2026-121581 |
low | 2.1 | 0.0023 | 2026-11-03 | A vulnerability has been found in ArcReel 0.32.0/0.33.0/0.34.0. The impacted element is an | |
CVE-2026-118237 |
medium | 5.3 | 0.0027 | 2026-11-03 | An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git |