Browse All CVEs
33,231 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-119664 |
medium | 5.3 | 0.0029 | 2026-10-30 | Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerabilit | |
CVE-2026-119665 |
medium | 5.3 | 0.0039 | 2026-10-30 | WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledT | |
CVE-2026-119662 |
high | 8.7 | 0.0043 | 2026-10-30 | Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows ad | |
CVE-2026-119663 |
medium | 5.3 | 0.0027 | 2026-10-30 | Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability | |
CVE-2026-119660 |
critical | 9.3 | 0.0052 | 2026-10-30 | MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthent | |
CVE-2026-119661 |
low | 2.3 | 0.0038 | 2026-10-30 | ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescL | |
CVE-2026-119658 |
medium | 5.3 | 0.0041 | 2026-10-30 | PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allow | |
CVE-2026-119659 |
medium | 5.3 | 0.0026 | 2026-10-30 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenti | |
CVE-2026-119656 |
high | 8.7 | 0.0034 | 2026-10-30 | CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerabilit | |
CVE-2026-119657 |
low | 2.3 | 0.0033 | 2026-10-30 | FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/libr | |
CVE-2026-119654 |
high | 8.7 | 0.0050 | 2026-10-30 | DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any au | |
CVE-2026-119655 |
high | 8.7 | 0.0034 | 2026-10-30 | CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/ | |
CVE-2026-119652 |
medium | 5.3 | 0.0028 | 2026-10-30 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in Fr | |
CVE-2026-119653 |
medium | 5.3 | 0.0035 | 2026-10-30 | Nging through 5.3.5 contains an information disclosure vulnerability that allows any authe | |
CVE-2026-119650 |
medium | 5.3 | 0.0030 | 2026-10-30 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in Pr | |
CVE-2026-119651 |
medium | 5.3 | 0.0031 | 2026-10-30 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in Fe | |
CVE-2026-119648 |
medium | 5.3 | 0.0029 | 2026-10-30 | Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerabil | |
CVE-2026-119649 |
high | 7.1 | 0.0036 | 2026-10-30 | Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaL | |
CVE-2026-119646 |
medium | 5.3 | 0.0046 | 2026-10-30 | Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authe | |
CVE-2026-119647 |
medium | 5.3 | 0.0031 | 2026-10-30 | RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServ | |
CVE-2026-119644 |
medium | 5.3 | 0.0033 | 2026-10-30 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenti | |
CVE-2026-119645 |
high | 7.1 | 0.0039 | 2026-10-30 | ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc( | |
CVE-2026-111487 |
medium | 4.3 | 0.0013 | 2026-10-30 | An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the | |
CVE-2026-112905 |
critical | 9.0 | 0.0050 | 2026-10-30 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-110799 |
critical | 9.8 | 0.0071 | 2026-10-30 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-63909 |
high | 8.1 | 0.0063 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regre | |
CVE-2026-63910 |
high | 7.8 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: fix UAF in d | |
CVE-2026-63911 |
high | 7.8 | 0.0017 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: reset ru | |
CVE-2026-63918 |
high | 7.8 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcount_in | |
CVE-2026-63928 |
high | 7.8 | 0.0017 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: | |
CVE-2026-63929 |
medium | 5.5 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA | |
CVE-2026-63930 |
high | 7.8 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consu | |
CVE-2026-63931 |
medium | 5.5 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: | |
CVE-2026-63932 |
medium | 5.5 | 0.0015 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: mhz19b | |
CVE-2026-63933 |
medium | 5.5 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16260: | |
CVE-2026-63934 |
high | 7.1 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: itg3200: f | |
CVE-2026-63935 |
medium | 5.5 | 0.0014 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: nxp-sar-adc | |
CVE-2026-63936 |
medium | 5.5 | 0.0015 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: mt6359: fix | |
CVE-2026-63943 |
high | 7.1 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out | |
CVE-2026-63948 |
medium | 5.5 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix | |
CVE-2026-63949 |
high | 7.1 | 0.0013 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-disp | |
CVE-2026-63950 |
high | 7.8 | 0.0017 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize n | |
CVE-2026-91214 |
critical | 9.8 | 0.0047 | 2026-10-30 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91233 |
critical | 9.8 | 0.0047 | 2026-10-30 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Ente | |
CVE-2026-91234 |
critical | 9.8 | 0.0047 | 2026-10-30 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91235 |
critical | 9.8 | 0.0047 | 2026-10-30 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91236 |
critical | 9.8 | 0.0047 | 2026-10-30 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-100355 |
low | 3.1 | 0.0028 | 2026-10-30 | Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire me | |
CVE-2026-112348 |
medium | 6.9 | 0.0029 | 2026-10-30 | Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that all | |
CVE-2026-117350 |
— | — | 0.0017 | 2026-10-30 | Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. |