Browse All CVEs
50,486 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-116664 |
low | 3.1 | 0.0017 | 2026-11-03 | Tanium addressed an improper access controls vulnerability in Discover. | |
CVE-2026-116663 |
medium | 6.5 | 0.0025 | 2026-11-03 | Tanium addressed an improper access controls vulnerability in Enforce. | |
CVE-2026-116654 |
medium | 6.5 | 0.0027 | 2026-11-03 | Tanium addressed an improper input validation vulnerability in Threat Response. | |
CVE-2026-116653 |
medium | 4.3 | 0.0021 | 2026-11-03 | Tanium addressed an improper input validation vulnerability in Threat Response. | |
CVE-2026-116652 |
medium | 4.3 | 0.0021 | 2026-11-03 | Tanium addressed a business logic error in Threat Response. | |
CVE-2026-116651 |
high | 8.8 | 0.0037 | 2026-11-03 | Tanium addressed an unauthorized code execution vulnerability in Threat Response. | |
CVE-2026-116648 |
medium | 4.1 | 0.0021 | 2026-11-03 | Tanium addressed an improper output sanitization vulnerability in Discover. | |
CVE-2026-116646 |
medium | 4.3 | 0.0026 | 2026-11-03 | Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response. | |
CVE-2026-108327 |
medium | 5.0 | 0.0026 | 2026-11-03 | Tanium addressed a path traversal vulnerability in Tanium Data Service. | |
CVE-2026-108324 |
medium | 6.5 | 0.0018 | 2026-11-03 | Tanium addressed a denial of service vulnerability in Tanium Client. | |
CVE-2026-116668 |
medium | 4.3 | 0.0027 | 2026-11-03 | Tanium addressed an uncontrolled resource consumption vulnerability in Discover. | |
CVE-2026-116666 |
medium | 4.3 | 0.0022 | 2026-11-03 | Tanium addressed an information disclosure vulnerability in Discover. | |
CVE-2026-116661 |
medium | 6.5 | 0.0021 | 2026-11-03 | Tanium addressed an improper access controls vulnerability in Enforce. | |
CVE-2026-116650 |
high | 8.8 | 0.0037 | 2026-11-03 | Tanium addressed an unauthorized code execution vulnerability in Threat Response. | |
CVE-2026-111085 |
— | — | — | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-108516 |
— | — | — | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-107916 |
— | — | — | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-103429 |
— | — | — | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-96541 |
high | 7.5 | 0.0095 | 2026-11-03 | A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote atta | |
CVE-2026-96423 |
high | 7.1 | 0.0014 | 2026-11-03 | X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of servic | |
CVE-2026-95324 |
low | 3.4 | 0.0021 | 2026-11-03 | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote att | |
CVE-2026-95308 |
low | 3.4 | 0.0019 | 2026-11-03 | Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attac | |
CVE-2026-95293 |
medium | 4.7 | 0.0024 | 2026-11-03 | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote att | |
CVE-2026-92909 |
critical | 9.8 | 0.0079 | 2026-11-03 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result i | |
CVE-2026-87544 |
— | — | 0.0034 | 2026-11-03 | Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a re | |
CVE-2026-84389 |
low | 3.1 | 0.0022 | 2026-11-03 | A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM | |
CVE-2026-84385 |
medium | 5.4 | 0.0023 | 2026-11-03 | A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, Fo | |
CVE-2026-82393 |
high | 7.5 | 0.0063 | 2026-11-03 | pnpm is a package manager. Prior to 10.34.5 and 11.11.0, pnpm accepts a scoped path traver | |
CVE-2026-121614 |
high | 7.1 | 0.0013 | 2026-11-03 | Docker Sandboxes versions 0.31.0 before 0.50.0 do not neutralize repository-controlled Git | |
CVE-2026-121542 |
low | 1.8 | 0.0014 | 2026-11-03 | In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose | |
CVE-2026-121541 |
medium | 5.6 | 0.0011 | 2026-11-03 | In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that build | |
CVE-2026-121522 |
medium | 6.7 | 0.0012 | 2026-11-03 | In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves me | |
CVE-2026-118865 |
high | 7.3 | 0.0088 | 2026-11-03 | An authenticated OS command injection vulnerability exists in the Offline Download compone | |
CVE-2026-115541 |
high | 7.2 | 0.0040 | 2026-11-03 | HumHub Community Edition 1.19.0 contains a stored cross-site scripting vulnerability in th | |
CVE-2025-15381 |
high | 8.1 | 0.0035 | 2026-11-03 | In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and | |
CVE-2025-62848 |
high | 8.1 | 0.0086 | 2026-11-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operatin | |
CVE-2025-48734 |
high | 8.8 | 0.0202 | 2026-11-03 | 1 PoC | Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector cla |
CVE-2025-25469 |
high | 8.8 | 0.0046 | 2026-11-03 | FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the comp | |
CVE-2026-121524 |
medium | 5.5 | 0.0032 | 2026-11-03 | A flaw has been found in sumiie24 School-Management-System up to d946d649c7c95e101fc5679ec | |
CVE-2026-22058 |
critical | 9.1 | 0.0027 | 2026-11-03 | StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker wit | |
CVE-2026-22060 |
medium | 6.9 | 0.0033 | 2026-11-03 | All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurat | |
CVE-2026-121531 |
low | 2.1 | 0.0035 | 2026-11-03 | A vulnerability has been found in Umami 3.3.x/3.4.0/3.4.1. This affects an unknown part of | |
CVE-2025-1094 |
high | 8.1 | 0.9003 | 2026-11-03 | 6 PoC | Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), |
CVE-2025-12543 |
critical | 9.6 | 0.0133 | 2026-11-03 | A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, an | |
CVE-2025-10871 |
low | 3.8 | 0.0038 | 2026-11-03 | An issue has been discovered in GitLab EE affecting all versions from 16.6 before 18.2.7, | |
CVE-2025-10703 |
high | 8.6 | 0.0032 | 2026-11-03 | Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDi | |
CVE-2025-10702 |
high | 8.6 | 0.0032 | 2026-11-03 | Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDi | |
CVE-2025-10578 |
medium | 5.8 | 0.0012 | 2026-11-03 | A potential security vulnerability has been identified in the HP Support Assistant for ver | |
CVE-2025-10280 |
high | 7.1 | 0.0022 | 2026-11-03 | IdentityIQ 8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and | |
CVE-2025-10243 |
high | 7.2 | 0.2130 | 2026-11-03 | OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, |