Browse All CVEs
3,601 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-17768 |
critical | 9.6 | 0.0034 | 2026-10-29 | Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7 | |
CVE-2026-17801 |
critical | 9.6 | 0.0043 | 2026-10-29 | Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a re | |
CVE-2026-17803 |
critical | 9.6 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151. | |
CVE-2026-17804 |
critical | 9.6 | 0.0034 | 2026-10-29 | Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-17832 |
critical | 9.6 | 0.0034 | 2026-10-29 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-17834 |
critical | 9.6 | 0.0034 | 2026-10-29 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.79 | |
CVE-2026-17837 |
critical | 9.6 | 0.0034 | 2026-10-29 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.792 | |
CVE-2026-17847 |
critical | 9.6 | 0.0037 | 2026-10-29 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.7 | |
CVE-2026-17848 |
critical | 9.6 | 0.0032 | 2026-10-29 | Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-17855 |
critical | 9.6 | 0.0027 | 2026-10-29 | Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-17856 |
critical | 9.6 | 0.0034 | 2026-10-29 | Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 all | |
CVE-2026-17865 |
critical | 9.6 | 0.0034 | 2026-10-29 | Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allo | |
CVE-2026-17924 |
critical | 9.6 | 0.0034 | 2026-10-29 | Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker wh | |
CVE-2026-17940 |
critical | 9.6 | 0.0034 | 2026-10-29 | Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Andro | |
CVE-2026-17947 |
critical | 9.6 | 0.0034 | 2026-10-29 | Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote atta | |
CVE-2026-17987 |
critical | 9.6 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151. | |
CVE-2026-17990 |
critical | 9.6 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.792 | |
CVE-2026-17991 |
critical | 9.6 | 0.0034 | 2026-10-29 | Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 a | |
CVE-2026-18002 |
critical | 9.6 | 0.0034 | 2026-10-29 | Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0. | |
CVE-2026-18015 |
critical | 9.6 | 0.0034 | 2026-10-29 | Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowe | |
CVE-2026-48449 |
critical | 9.8 | 0.0086 | 2026-10-29 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that | |
CVE-2026-58046 |
critical | 9.9 | 0.0057 | 2026-10-29 | Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privile | |
CVE-2026-18363 |
critical | 9.1 | 0.0048 | 2026-10-29 | A logic vulnerability in the password reset token validation routine implemented by osTick | |
CVE-2026-54363 |
critical | 9.3 | 0.0069 | 2026-10-29 | CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows u | |
CVE-2026-11707 |
critical | 9.3 | 0.0038 | 2026-10-29 | IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server | |
CVE-2026-14522 |
critical | 9.8 | 0.0102 | 2026-10-29 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 coul | |
CVE-2026-15435 |
critical | 9.8 | 0.0073 | 2026-10-29 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 coul | |
CVE-2026-53431 |
critical | 9.1 | 0.0051 | 2026-10-29 | Authentication Bypass by Capture-replay vulnerability in malach-it Boruta allows an attack | |
CVE-2026-28323 |
critical | 9.8 | 0.0103 | 2026-10-29 | SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerabi | |
CVE-2026-28812 |
critical | 9.8 | 0.0069 | 2026-10-29 | UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may a | |
CVE-2026-4978 |
critical | 9.8 | 0.0047 | 2026-10-29 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulne | |
CVE-2026-52680 |
critical | 9.8 | 0.0111 | 2026-10-29 | Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart file | |
CVE-2026-12940 |
critical | 9.8 | 0.0094 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execu | |
CVE-2026-12118 |
critical | 9.8 | 0.0085 | 2026-10-29 | IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote at | |
CVE-2026-13435 |
critical | 9.9 | 0.0053 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability | |
CVE-2026-12946 |
critical | 9.9 | 0.0063 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary co | |
CVE-2026-67208 |
critical | 9.3 | 0.0722 | 2026-10-29 | Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenti | |
CVE-2026-67594 |
critical | 9.3 | 0.0085 | 2026-10-29 | Spikster through commit e1cdf8c contains a missing authentication vulnerability that allow | |
CVE-2026-66418 |
critical | 9.3 | 0.0063 | 2026-10-29 | OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows | |
CVE-2026-66803 |
critical | 10.0 | 0.0090 | 2026-10-29 | Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code | |
CVE-2026-68502 |
critical | 9.8 | 0.0097 | 2026-10-29 | LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior | |
CVE-2026-68503 |
critical | 9.8 | 0.0075 | 2026-10-29 | LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior | |
CVE-2026-38709 |
critical | 9.8 | 0.0275 | 2026-10-29 | TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3 | |
CVE-2026-18452 |
critical | 10.0 | 0.0063 | 2026-10-29 | DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerabili | |
CVE-2026-17561 |
critical | 9.8 | 0.0056 | 2026-10-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Softwar | |
CVE-2026-16503 |
critical | 9.1 | 0.0043 | 2026-10-29 | Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that i | |
CVE-2026-16504 |
critical | 9.8 | 0.0048 | 2026-10-29 | Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing | |
CVE-2026-17349 |
critical | 9.3 | 0.0040 | 2026-10-29 | /misc/workspace/adhoc_connect_server, part of the Workspaces feature introduced in pgAdmin | |
CVE-2026-17351 |
critical | 9.4 | 0.0048 | 2026-10-29 | The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the | |
CVE-2026-17566 |
critical | 9.4 | 0.0067 | 2026-10-29 | pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolatin |