Browse All CVEs
11,466 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2017-20284 |
high | 8.7 | — | 2026-10-29 | Caucho Resin contains a path traversal vulnerability in the documentation webapp (resin-do | |
CVE-2017-20252 |
high | 8.8 | — | 2026-10-29 | Joomla NextGen Editor 2.1.0 contains an SQL injection vulnerability that allows unauthenti | |
CVE-2016-20058 |
high | 8.5 | — | 2026-10-29 | Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in | |
CVE-2016-20097 |
high | 8.7 | — | 2026-10-29 | Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLo | |
CVE-2015-20120 |
high | 8.8 | — | 2026-10-29 | Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vu | |
CVE-2016-20057 |
high | 8.5 | — | 2026-10-29 | NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in | |
CVE-2026-104084 |
high | 8.7 | 0.0031 | 2026-10-29 | SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT acce | |
CVE-2026-104082 |
high | 8.6 | 0.0087 | 2026-10-29 | SmarterMail before build 9777 contains a remote code execution vulnerability that allows a | |
CVE-2026-104077 |
high | 8.5 | 0.0026 | 2026-10-29 | Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows | |
CVE-2026-104078 |
high | 8.4 | 0.0017 | 2026-10-29 | Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJ | |
CVE-2026-104069 |
high | 8.6 | 0.0053 | 2026-10-29 | HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startI | |
CVE-2026-100640 |
high | 8.6 | 0.0024 | 2026-10-29 | SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that | |
CVE-2026-0993 |
high | 8.7 | 0.0039 | 2026-10-29 | SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability | |
CVE-2026-100635 |
high | 8.2 | 0.0033 | 2026-10-29 | SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish servic | |
CVE-2023-54402 |
high | 8.7 | 0.0045 | 2026-10-29 | iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint | |
CVE-2022-50926 |
high | 8.7 | 0.0055 | 2026-10-29 | WAGO 750-8212 PFC200 G2 2ETH RS firmware contains a privilege escalation vulnerability tha | |
CVE-2021-47802 |
high | 8.7 | — | 2026-10-29 | Tenda D151 and D301 routers contain an unauthenticated configuration download vulnerabilit | |
CVE-2026-88893 |
high | 8.7 | 0.0049 | 2026-10-29 | OpenPanel through 2.3.0 share lookup procedures fail to validate access controls and retur | |
CVE-2026-88891 |
high | 7.2 | 0.0044 | 2026-10-29 | OpenPanel through 2.3.0 fails to enforce read-only project access level on 26 of 29 mutati | |
CVE-2026-88890 |
high | 8.4 | 0.0039 | 2026-10-29 | OpenPanel through 2.3.0 contains an SQL injection vulnerability in the analytics filter bu | |
CVE-2026-85612 |
high | 8.7 | 0.0041 | 2026-10-29 | OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerabili | |
CVE-2026-85613 |
high | 8.4 | 0.0040 | 2026-10-29 | OpenPanel before 2.3.0 contains a cross-site scripting vulnerability in the unauthenticate | |
CVE-2026-85610 |
high | 8.7 | 0.0071 | 2026-10-29 | OpenPanel before 2.3.0 fails to properly validate chart formula expressions, allowing auth | |
CVE-2026-82634 |
high | 7.1 | 0.0042 | 2026-10-29 | Frappe Framework development builds contain an authorization flaw in the render_jinja_temp | |
CVE-2026-77214 |
high | 8.3 | 0.0032 | 2026-10-29 | libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse. | |
CVE-2026-76832 |
high | 8.5 | 0.0126 | 2026-10-29 | Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerabili | |
CVE-2026-63172 |
high | 7.1 | 0.0021 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that | |
CVE-2026-63174 |
high | 8.6 | 0.0025 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that | |
CVE-2026-63163 |
high | 8.7 | 0.0036 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in t | |
CVE-2026-63165 |
high | 8.6 | 0.0031 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calen | |
CVE-2026-63162 |
high | 8.7 | 0.0071 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows | |
CVE-2026-63161 |
high | 8.6 | 0.0038 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allo | |
CVE-2026-63154 |
high | 8.7 | 0.0043 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability t | |
CVE-2026-63152 |
high | 8.6 | 0.0031 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability | |
CVE-2026-63153 |
high | 8.6 | 0.0029 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in s | |
CVE-2026-40030 |
high | 8.4 | 0.0075 | 2026-10-29 | parseusbs before 1.9 contains an OS command injection vulnerability where the volume listi | |
CVE-2026-53995 |
high | 8.8 | 0.0060 | 2026-10-29 | MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore trackin | |
CVE-2026-40029 |
high | 8.5 | 0.0080 | 2026-10-29 | parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where | |
CVE-2026-95610 |
high | 8.5 | 0.0021 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-18349 |
high | 7.3 | 0.0018 | 2026-10-29 | Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 | |
CVE-2026-3415 |
high | 8.7 | 0.0049 | 2026-10-29 | The XML and schema validation functionalities within the SchemaValidator Mediator process | |
CVE-2023-5009 |
high | 8.2 | 0.0965 | 2026-10-29 | An issue has been discovered in GitLab EE affecting all versions starting from 13.12 befor | |
CVE-2023-3399 |
high | 8.5 | 0.0045 | 2026-10-29 | An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before | |
CVE-2023-3932 |
high | 8.2 | 0.0088 | 2026-10-29 | An issue has been discovered in GitLab EE affecting all versions starting from 13.12 befor | |
CVE-2026-111357 |
high | 7.0 | 0.0025 | 2026-10-29 | Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts | |
CVE-2026-85634 |
high | 8.8 | 0.0041 | 2026-10-29 | A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly- | |
CVE-2026-97800 |
high | 7.8 | 0.0030 | 2026-10-29 | Incorrect permission assignment for critical resource in Windows Mobile Broadband allows a | |
CVE-2026-97789 |
high | 7.5 | 0.0056 | 2026-10-29 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov | |
CVE-2026-97794 |
high | 7.8 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) a | |
CVE-2026-97783 |
high | 8.1 | 0.0050 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi |