Browse All CVEs
13,101 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-110196 |
high | 8.8 | 0.0049 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged | |
CVE-2026-110193 |
high | 8.8 | 0.0076 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged | |
CVE-2026-107026 |
high | 7.5 | 0.0046 | 2026-10-29 | Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized at | |
CVE-2026-96196 |
high | 8.8 | 0.0077 | 2026-10-29 | Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthor | |
CVE-2026-96203 |
high | 8.8 | 0.0059 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to eleva | |
CVE-2026-96187 |
high | 7.4 | 0.0051 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-96192 |
high | 8.8 | 0.0059 | 2026-10-29 | Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code o | |
CVE-2026-88077 |
high | 8.8 | 0.0064 | 2026-10-29 | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized a | |
CVE-2026-85899 |
high | 8.1 | 0.0064 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate | |
CVE-2026-61995 |
high | 7.1 | 0.0023 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions. | |
CVE-2026-61996 |
high | 8.5 | 0.0038 | 2026-10-29 | Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions. | |
CVE-2026-61993 |
high | 7.1 | 0.0023 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions. | |
CVE-2026-61988 |
high | 7.1 | 0.0024 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Auction Nudge – Your eBay on Your Site <= 8. | |
CVE-2026-61989 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions. | |
CVE-2026-54866 |
high | 7.1 | 0.0024 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= | |
CVE-2026-54864 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions. | |
CVE-2026-42701 |
high | 7.2 | 0.0037 | 2026-10-29 | Shop manager PHP Object Injection in YayMail <= 4.4.6 versions. | |
CVE-2026-42692 |
high | 7.1 | 0.0024 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions. | |
CVE-2026-27394 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Eventer <= 0.1.1 versions. | |
CVE-2026-118082 |
high | 8.8 | 0.0036 | 2026-10-29 | Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions. | |
CVE-2026-118085 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 version | |
CVE-2026-118080 |
high | 8.8 | 0.0037 | 2026-10-29 | Contributor PHP Object Injection in Social Snap <= 1.5.4 versions. | |
CVE-2026-118081 |
high | 8.8 | 0.0037 | 2026-10-29 | Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions. | |
CVE-2026-118078 |
high | 7.2 | 0.0030 | 2026-10-29 | Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versio | |
CVE-2026-118079 |
high | 7.2 | 0.0030 | 2026-10-29 | Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions. | |
CVE-2026-118076 |
high | 8.8 | 0.0037 | 2026-10-29 | Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions. | |
CVE-2026-118077 |
high | 7.2 | 0.0030 | 2026-10-29 | Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions. | |
CVE-2026-118075 |
high | 8.8 | 0.0037 | 2026-10-29 | Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions. | |
CVE-2026-118073 |
high | 8.8 | 0.0039 | 2026-10-29 | Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. | |
CVE-2026-118074 |
high | 7.2 | 0.0030 | 2026-10-29 | Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions. | |
CVE-2026-116868 |
high | 8.8 | 0.0045 | 2026-10-29 | Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 version | |
CVE-2026-116869 |
high | 7.2 | 0.0030 | 2026-10-29 | Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions. | |
CVE-2026-116866 |
high | 8.8 | 0.0029 | 2026-10-29 | Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions. | |
CVE-2026-116867 |
high | 8.8 | 0.0037 | 2026-10-29 | Contributor PHP Object Injection in Dynamic QR Code – generator <= 1.0.1 versions. | |
CVE-2026-116864 |
high | 7.2 | 0.0030 | 2026-10-29 | Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions. | |
CVE-2026-116865 |
high | 7.2 | 0.0030 | 2026-10-29 | Editor PHP Object Injection in Zippy <= 1.7.0 versions. | |
CVE-2026-114148 |
high | 7.8 | 0.0036 | 2026-10-29 | 1 PoC | Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate pri |
CVE-2026-108494 |
high | 7.1 | 0.0019 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions. | |
CVE-2026-107328 |
high | 8.8 | 0.0082 | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execu |
CVE-2026-107329 |
high | 8.8 | 0.0082 | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execu |
CVE-2026-107327 |
high | 8.8 | 0.0066 | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execu |
CVE-2026-107326 |
high | 8.8 | 0.0069 | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execu |
CVE-2026-104324 |
high | 8.8 | 0.0065 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execu | |
CVE-2026-104328 |
high | 8.8 | 0.0069 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execu | |
CVE-2026-103092 |
high | 8.8 | 0.0037 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execu | |
CVE-2026-102590 |
high | 7.7 | 0.0024 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtai | |
CVE-2026-101288 |
high | 8.8 | 0.0069 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execu | |
CVE-2026-86016 |
high | 8.2 | 0.0028 | 2026-10-29 | VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerH | |
CVE-2026-104875 |
high | 7.1 | 0.0041 | 2026-10-29 | Ente provides end-to-end encrypted cloud services and security tools. Prior to server imag | |
CVE-2026-107020 |
high | 7.5 | 0.0058 | 2026-10-29 | An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader ver |