Browse All CVEs
33,233 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-112348 |
medium | 6.9 | 0.0029 | 2026-10-30 | Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that all | |
CVE-2026-117350 |
— | — | 0.0017 | 2026-10-30 | Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. | |
CVE-2026-49115 |
— | — | — | 2026-10-30 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-49116 |
— | — | — | 2026-10-30 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-91915 |
medium | 6.8 | 0.0028 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization o | |
CVE-2026-115683 |
medium | 6.8 | 0.0022 | 2026-10-30 | A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate | |
CVE-2026-117028 |
— | — | 0.0016 | 2026-10-30 | Skuul School Management System through version 2.6.5 is vulnerable to incorrect access con | |
CVE-2026-111500 |
medium | 5.4 | 0.0023 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for | |
CVE-2026-111499 |
medium | 5.5 | 0.0014 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assi | |
CVE-2026-91914 |
high | 7.1 | 0.0025 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by | |
CVE-2026-91913 |
high | 8.8 | 0.0265 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization o | |
CVE-2026-111498 |
medium | 4.7 | 0.0011 | 2026-10-30 | OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vuln | |
CVE-2026-86715 |
high | 7.1 | 0.0013 | 2026-10-30 | Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technolo | |
CVE-2026-78408 |
high | 7.9 | 0.0019 | 2026-10-30 | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves tha | |
CVE-2026-78410 |
high | 7.8 | 0.0016 | 2026-10-30 | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but | |
CVE-2026-119528 |
high | 7.8 | 0.0019 | 2026-10-30 | A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect | |
CVE-2026-91912 |
high | 7.3 | 0.0012 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptog | |
CVE-2026-13002 |
medium | 4.4 | 0.0015 | 2026-10-30 | Rejected reason: Rejected as this CVE is duplicate to CVE-2026-4890. | |
CVE-2026-13595 |
medium | 5.3 | 0.0014 | 2026-10-30 | A flaw was found in the libblkid library of util-linux. During nested partition probing, t | |
CVE-2026-112347 |
high | 7.2 | 0.0028 | 2026-10-30 | Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vuln | |
CVE-2026-119542 |
medium | 4.3 | 0.0033 | 2026-10-30 | A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested | |
CVE-2026-106634 |
high | 7.7 | 0.0046 | 2026-10-30 | Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restrict | |
CVE-2026-107305 |
medium | 5.4 | 0.0036 | 2026-10-30 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability | |
CVE-2026-119602 |
medium | 6.3 | 0.0031 | 2026-10-30 | libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in t | |
CVE-2026-119600 |
medium | 6.3 | 0.0037 | 2026-10-30 | tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthentic | |
CVE-2026-119601 |
medium | 6.9 | 0.0012 | 2026-10-30 | AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() t | |
CVE-2026-119598 |
medium | 5.3 | 0.0035 | 2026-10-30 | Miaomiaowu before 0.9.3 contains an insecure direct object reference vulnerability in /api | |
CVE-2026-119599 |
medium | 5.3 | 0.0041 | 2026-10-30 | AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows pro | |
CVE-2026-119596 |
medium | 5.3 | 0.0028 | 2026-10-30 | UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipControll | |
CVE-2026-119597 |
critical | 9.3 | 0.0037 | 2026-10-30 | OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows | |
CVE-2026-119577 |
high | 7.6 | 0.0029 | 2026-10-30 | ArcadeDB before 26.10.2 contains an improper authorization vulnerability that allows revok | |
CVE-2026-119578 |
high | 8.5 | 0.0055 | 2026-10-30 | MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg | |
CVE-2026-119575 |
high | 7.1 | 0.0026 | 2026-10-30 | ArcadeDB from 26.8.1 before 26.10.2 contains a server-side request forgery vulnerability t | |
CVE-2026-119576 |
medium | 5.3 | 0.0022 | 2026-10-30 | ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that a | |
CVE-2026-119573 |
low | 2.1 | 0.0027 | 2026-10-30 | Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NG | |
CVE-2026-119574 |
high | 8.2 | 0.0028 | 2026-10-30 | Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that a | |
CVE-2026-119571 |
medium | 6.3 | 0.0022 | 2026-10-30 | Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies | |
CVE-2026-119572 |
high | 7.0 | 0.0019 | 2026-10-30 | Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in t | |
CVE-2026-119569 |
medium | 6.0 | 0.0038 | 2026-10-30 | Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution | |
CVE-2026-119570 |
low | 2.3 | 0.0025 | 2026-10-30 | Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerabi | |
CVE-2026-118986 |
— | — | 0.0016 | 2026-10-30 | CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing sec | |
CVE-2026-118987 |
— | — | 0.0016 | 2026-10-30 | CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the | |
CVE-2026-18508 |
medium | 4.4 | 0.0014 | 2026-10-30 | A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, h | |
CVE-2026-107682 |
medium | 5.4 | 0.0019 | 2026-10-30 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerabili | |
CVE-2026-109415 |
medium | 5.4 | 0.0036 | 2026-10-30 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability | |
CVE-2026-110037 |
medium | 5.4 | 0.0036 | 2026-10-30 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability | |
CVE-2026-110080 |
medium | 5.4 | 0.0019 | 2026-10-30 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerabili | |
CVE-2026-118990 |
— | — | 0.0016 | 2026-10-30 | CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configurati | |
CVE-2026-118991 |
— | — | 0.0010 | 2026-10-30 | CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded | |
CVE-2026-118992 |
high | 8.4 | 0.0023 | 2026-10-30 | CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell c |