Browse All CVEs
50,483 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-121041 |
medium | 6.5 | 0.0018 | 2026-11-03 | Missing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote at | |
CVE-2026-121040 |
high | 8.1 | 0.0024 | 2026-11-03 | Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote a | |
CVE-2026-121039 |
medium | 5.3 | 0.0012 | 2026-11-03 | Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an a | |
CVE-2026-121038 |
medium | 6.5 | 0.0028 | 2026-11-03 | Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote a | |
CVE-2026-121037 |
critical | 9.6 | 0.0045 | 2026-11-03 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed | |
CVE-2026-121036 |
high | 8.8 | 0.0037 | 2026-11-03 | Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to | |
CVE-2026-121035 |
critical | 9.6 | 0.0044 | 2026-11-03 | Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attac | |
CVE-2026-121034 |
critical | 9.6 | 0.0042 | 2026-11-03 | Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a re | |
CVE-2026-121033 |
medium | 6.5 | 0.0030 | 2026-11-03 | Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowe | |
CVE-2026-121032 |
high | 7.4 | 0.0030 | 2026-11-03 | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attack | |
CVE-2026-121031 |
medium | 6.5 | 0.0023 | 2026-11-03 | Missing authorization in PDF in Google Chrome prior to 157.0.8103.38 allowed a remote atta | |
CVE-2026-121030 |
critical | 9.6 | 0.0041 | 2026-11-03 | Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remo | |
CVE-2026-121029 |
medium | 4.3 | 0.0019 | 2026-11-03 | Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote at | |
CVE-2026-120716 |
medium | 6.5 | 0.0028 | 2026-11-03 | Insertion of sensitive information into sent data in the identity provider user synchroniz | |
CVE-2026-119636 |
high | 8.8 | 0.0046 | 2026-11-03 | Improper release of expired privileged access checkouts in the PAM scheduled check-in task | |
CVE-2026-115779 |
medium | 6.3 | 0.0063 | 2026-11-03 | Effect is a TypeScript framework that consists of several packages that work together to h | |
CVE-2026-55186 |
medium | 4.2 | 0.0028 | 2026-11-03 | Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. Prior to 6.0.0 | |
CVE-2026-28531 |
— | — | — | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-121514 |
medium | 5.3 | 0.0020 | 2026-11-03 | A weakness has been identified in EasySoft ZenTao PMS up to 22.6. This impacts the functio | |
CVE-2026-115731 |
critical | 9.4 | 0.0037 | 2026-11-03 | Deserialization of untrusted data in the report-processing code of Puppet, as used by Pupp | |
CVE-2026-82161 |
medium | 6.8 | 0.0018 | 2026-11-03 | Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutraliza | |
CVE-2026-82159 |
high | 8.8 | 0.0044 | 2026-11-03 | Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutraliza | |
CVE-2026-82158 |
critical | 9.0 | 0.0035 | 2026-11-03 | Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutraliza | |
CVE-2026-111754 |
medium | 5.1 | 0.0098 | 2026-11-03 | Angular is a development platform for building mobile and desktop web applications using T | |
CVE-2026-111752 |
high | 8.2 | 0.0099 | 2026-11-03 | Angular is a development platform for building mobile and desktop web applications using T | |
CVE-2026-101446 |
critical | 9.9 | 0.0040 | 2026-11-03 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-101445 |
low | 3.6 | 0.0011 | 2026-11-03 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-101444 |
medium | 5.5 | 0.0015 | 2026-11-03 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-101443 |
medium | 6.5 | 0.0034 | 2026-11-03 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-101442 |
low | 3.1 | 0.0021 | 2026-11-03 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-101441 |
medium | 5.3 | 0.0028 | 2026-11-03 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-101440 |
medium | 5.9 | 0.0028 | 2026-11-03 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-101439 |
medium | 5.9 | 0.0032 | 2026-11-03 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-101438 |
high | 8.0 | 0.0024 | 2026-11-03 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-95860 |
critical | 9.1 | 0.0060 | 2026-11-03 | node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.42.0 until 2.180 | |
CVE-2026-61495 |
high | 7.0 | 0.0029 | 2026-11-03 | TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerabi | |
CVE-2026-121502 |
medium | 5.5 | 0.0031 | 2026-11-03 | A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project. The impacted el | |
CVE-2026-120959 |
low | 2.1 | 0.0022 | 2026-11-03 | A memory-handling flaw in the MongoDB Atlas SQL ODBC Driver can cause values returned for | |
CVE-2026-120952 |
medium | 6.0 | 0.0036 | 2026-11-03 | An out-of-bounds write in the MongoDB Atlas SQL ODBC Driver may be triggered when a value | |
CVE-2026-61497 |
medium | 5.2 | 0.0028 | 2026-11-03 | TinyUSB before 0.21.0 contains an integer underflow vulnerability in the HID host report d | |
CVE-2026-61496 |
— | — | — | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-115878 |
high | 7.8 | 0.0060 | 2026-11-03 | 1 PoC | Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and |
CVE-2026-121580 |
high | 8.1 | 0.0026 | 2026-11-03 | Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026 | |
CVE-2026-88968 |
high | 7.7 | 0.0032 | 2026-11-03 | Claude Code is an agentic coding tool. Prior to 2.1.251, the Edit tool validates a target | |
CVE-2026-88066 |
high | 7.5 | 0.0029 | 2026-11-03 | Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1. | |
CVE-2026-84176 |
medium | 6.5 | 0.0058 | 2026-11-03 | 1 PoC | Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platfo |
CVE-2026-80344 |
high | 8.2 | 0.0088 | 2026-11-03 | 1 PoC | Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. This issu |
CVE-2026-80343 |
high | 8.2 | 0.0093 | 2026-11-03 | 1 PoC | Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. |
CVE-2026-79986 |
critical | 9.1 | 0.0102 | 2026-11-03 | 1 PoC | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili |
CVE-2026-79983 |
critical | 9.1 | 0.0102 | 2026-11-03 | 1 PoC | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili |