Browse All CVEs
13,101 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-107049 |
high | 7.5 | 0.0017 | 2026-10-29 | An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user | |
CVE-2026-118759 |
high | 7.5 | 0.0034 | 2026-10-29 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-110676 |
high | 7.5 | 0.0049 | 2026-10-29 | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponen | |
CVE-2026-110677 |
high | 7.5 | 0.0049 | 2026-10-29 | Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplica | |
CVE-2026-11587 |
high | 7.2 | 0.0026 | 2026-10-29 | SQL injection allowing an authenticated user with access to ACL management to read and mod | |
CVE-2026-110675 |
high | 8.1 | 0.0045 | 2026-10-29 | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare ha | |
CVE-2023-7357 |
high | 8.6 | 0.0038 | 2026-10-29 | A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmi | |
CVE-2026-110682 |
high | 7.5 | 0.0042 | 2026-10-29 | Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the dec | |
CVE-2026-110678 |
high | 7.5 | 0.0049 | 2026-10-29 | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering increm | |
CVE-2026-107055 |
high | 7.5 | 0.0016 | 2026-10-29 | Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 all | |
CVE-2026-115805 |
high | 7.8 | 0.0017 | 2026-10-29 | Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may | |
CVE-2026-107052 |
high | 7.5 | 0.0035 | 2026-10-29 | Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode | |
CVE-2026-91219 |
high | 8.6 | 0.0030 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-84387 |
high | 7.2 | 0.0156 | 2026-10-29 | An Improper Neutralization of Special Elements used in a Command ('Command Injection') vul | |
CVE-2026-107047 |
high | 7.5 | 0.0043 | 2026-10-29 | Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to | |
CVE-2026-118758 |
high | 7.5 | 0.0053 | 2026-10-29 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-107044 |
high | 7.5 | 0.0017 | 2026-10-29 | Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized | |
CVE-2026-62374 |
high | 7.1 | 0.0023 | 2026-10-29 | SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specific | |
CVE-2026-101421 |
high | 7.5 | 0.0040 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-107042 |
high | 7.5 | 0.0036 | 2026-10-29 | Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unau | |
CVE-2026-119118 |
high | 8.3 | 0.0019 | 2026-10-29 | Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allow | |
CVE-2026-119119 |
high | 8.7 | 0.0036 | 2026-10-29 | Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server | |
CVE-2026-119120 |
high | 7.7 | 0.0042 | 2026-10-29 | Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in un | |
CVE-2026-119127 |
high | 8.6 | 0.0028 | 2026-10-29 | ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 | |
CVE-2026-119129 |
high | 8.6 | 0.0028 | 2026-10-29 | ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 contains a missing authorization vuln | |
CVE-2026-119144 |
high | 8.7 | 0.0031 | 2026-10-29 | Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template i | |
CVE-2026-118083 |
high | 7.5 | 0.0030 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions. | |
CVE-2026-111730 |
high | 7.2 | 0.0019 | 2026-10-29 | P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block | |
CVE-2026-84294 |
high | 7.7 | 0.0035 | 2026-10-29 | Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_F | |
CVE-2026-112200 |
high | 8.7 | 0.0041 | 2026-10-29 | P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session | |
CVE-2026-115793 |
high | 8.7 | 0.0040 | 2026-10-29 | P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that name | |
CVE-2026-111735 |
high | 7.1 | 0.0016 | 2026-10-29 | P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a r | |
CVE-2026-111736 |
high | 8.7 | 0.0040 | 2026-10-29 | P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling a | |
CVE-2026-111733 |
high | 8.7 | 0.0040 | 2026-10-29 | P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request w | |
CVE-2026-111734 |
high | 7.1 | 0.0016 | 2026-10-29 | P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_rec | |
CVE-2026-111731 |
high | 8.7 | 0.0040 | 2026-10-29 | P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortData | |
CVE-2026-107039 |
high | 7.5 | 0.0020 | 2026-10-29 | Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-roo | |
CVE-2026-107037 |
high | 7.5 | 0.0043 | 2026-10-29 | Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 7 | |
CVE-2026-90869 |
high | 7.5 | 0.0036 | 2026-10-29 | A remote attacker who knows a valid account's enrolled SSH public key can terminate the sh | |
CVE-2026-90867 |
high | 8.1 | 0.0040 | 2026-10-29 | Improper access control in the Web Admin console of Progress Software WS_FTP Server versio | |
CVE-2026-86948 |
high | 8.8 | 0.0016 | 2026-10-29 | This issue was addressed by enforcing library validation on the affected binaries. This is | |
CVE-2026-86949 |
high | 8.8 | 0.0016 | 2026-10-29 | This issue was addressed by enforcing library validation on the affected binaries. This is | |
CVE-2026-96199 |
high | 8.8 | 0.0059 | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attac | |
CVE-2025-47761 |
high | 7.1 | 0.0017 | 2026-10-29 | An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in | |
CVE-2026-96198 |
high | 8.8 | 0.0059 | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attac | |
CVE-2026-85897 |
high | 8.8 | 0.0059 | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attac | |
CVE-2026-93570 |
high | 8.2 | 0.0028 | 2026-10-29 | Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When | |
CVE-2026-85890 |
high | 8.8 | 0.0059 | 2026-10-29 | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute | |
CVE-2026-110309 |
high | 8.8 | 0.0056 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execu | |
CVE-2026-110245 |
high | 7.5 | 0.0037 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive in |