Browse All CVEs
50,472 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2021-4217 |
low | 3.3 | 0.0062 | 2026-11-02 | A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode st | |
CVE-2021-4204 |
high | 7.1 | 0.0124 | 2026-11-02 | 1 PoC | An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an I |
CVE-2021-4187 |
high | 7.8 | 0.0176 | 2026-11-02 | vim is vulnerable to Use After Free | |
CVE-2021-4173 |
high | 7.8 | 0.0176 | 2026-11-02 | vim is vulnerable to Use After Free | |
CVE-2021-4159 |
medium | 4.4 | 0.0025 | 2026-11-02 | A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data | |
CVE-2021-43877 |
medium | 4.6 | 0.0073 | 2026-11-02 | ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability | |
CVE-2021-43809 |
high | 7.3 | 0.0291 | 2026-11-02 | `Bundler` is a package for managing application dependencies in Ruby. In `bundler` version | |
CVE-2021-42322 |
medium | 4.6 | 0.0054 | 2026-11-02 | Visual Studio Code Elevation of Privilege Vulnerability | |
CVE-2021-41184 |
medium | 6.1 | 0.4077 | 2026-11-02 | 1 PoC | jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, acceptin |
CVE-2021-3997 |
medium | 5.5 | 0.0174 | 2026-11-02 | A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a d | |
CVE-2021-3826 |
medium | 6.5 | 0.0150 | 2026-11-02 | Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows | |
CVE-2021-38593 |
high | 7.5 | 0.0300 | 2026-11-02 | Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::c | |
CVE-2021-36976 |
medium | 6.5 | 0.0284 | 2026-11-02 | libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompr | |
CVE-2021-34532 |
low | 2.1 | 0.0122 | 2026-11-02 | ASP.NET Core and Visual Studio Information Disclosure Vulnerability | |
CVE-2021-34528 |
medium | 6.8 | 0.0314 | 2026-11-02 | Visual Studio Code Remote Code Execution Vulnerability | |
CVE-2022-2625 |
high | 8.0 | 0.0215 | 2026-11-02 | A vulnerability was found in PostgreSQL. This attack requires permission to create non-tem | |
CVE-2022-26931 |
high | 7.5 | 0.0269 | 2026-11-02 | Windows Kerberos Elevation of Privilege Vulnerability | |
CVE-2022-22018 |
high | 7.8 | 0.0237 | 2026-11-02 | HEVC Video Extensions Remote Code Execution Vulnerability | |
CVE-2022-1974 |
medium | 4.1 | 0.0015 | 2026-11-02 | A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race | |
CVE-2022-1725 |
medium | 5.5 | 0.0052 | 2026-11-02 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. | |
CVE-2022-1354 |
medium | 5.5 | 0.0056 | 2026-11-02 | A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() | |
CVE-2022-0171 |
medium | 5.5 | 0.0030 | 2026-11-02 | A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that al | |
CVE-2026-81938 |
high | 7.7 | 0.0039 | 2026-11-02 | Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that referenc | |
CVE-2026-105603 |
critical | 9.4 | 0.0030 | 2026-11-02 | Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifie | |
CVE-2026-120416 |
medium | 6.9 | 0.0032 | 2026-11-02 | A security vulnerability has been detected in AndyFactory newspaper4k up to 0.9.6. This af | |
CVE-2026-21387 |
medium | 5.4 | 0.0015 | 2026-11-02 | Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User | |
CVE-2026-20903 |
medium | 5.4 | 0.0016 | 2026-11-02 | Protection mechanism failure for some Intel(R) AI Containers before version v0.4.0 within | |
CVE-2026-20799 |
medium | 5.4 | 0.0010 | 2026-11-02 | Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 | |
CVE-2026-20770 |
medium | 5.4 | 0.0012 | 2026-11-02 | Protection mechanism failure for some Cluster Management Toolkit for Kubernetes software b | |
CVE-2026-20728 |
medium | 5.4 | 0.0012 | 2026-11-02 | Protection mechanism failure for some Intel Extension for TensorFlow software before versi | |
CVE-2021-31566 |
high | 7.8 | 0.0039 | 2026-11-02 | An improper link resolution flaw can occur while extracting an archive leading to changing | |
CVE-2021-2351 |
high | 8.3 | 0.0243 | 2026-11-02 | Vulnerability in the Advanced Networking Option component of Oracle Database Server. Suppo | |
CVE-2021-21353 |
medium | 6.8 | 0.0427 | 2026-11-02 | 1 PoC | Pug is an npm package which is a high-performance template engine. In pug before version |
CVE-2021-1636 |
high | 8.8 | 0.0651 | 2026-11-02 | 1 PoC | Microsoft SQL Elevation of Privilege Vulnerability |
CVE-2020-8231 |
high | 7.5 | 0.0534 | 2026-11-02 | Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connecti | |
CVE-2020-8908 |
low | 3.3 | 0.0092 | 2026-11-02 | A temp directory creation vulnerability exists in all versions of Guava, allowing an attac | |
CVE-2020-8203 |
high | 7.4 | 0.0521 | 2026-11-02 | 1 PoC | Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20. |
CVE-2026-80186 |
high | 7.6 | 0.0050 | 2026-11-02 | A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol | |
CVE-2019-10072 |
high | 7.5 | 0.7299 | 2026-11-02 | The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exha | |
CVE-2019-0232 |
high | 8.1 | 0.9992 | 2026-11-02 | 15 PoC | When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tom |
CVE-2019-0221 |
medium | 6.1 | 0.5825 | 2026-11-02 | The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 | |
CVE-2018-12209 |
low | 3.3 | 0.0032 | 2026-11-02 | Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* b | |
CVE-2017-5647 |
high | 7.5 | 0.1684 | 2026-11-02 | A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8. | |
CVE-2017-13745 |
high | 7.5 | 0.0394 | 2026-11-02 | There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec. | |
CVE-2026-117067 |
— | — | 0.0021 | 2026-11-02 | An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface | |
CVE-2019-14534 |
medium | 5.5 | 0.0140 | 2026-11-02 | In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function | |
CVE-2019-14533 |
high | 7.8 | 0.0146 | 2026-11-02 | The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-aft | |
CVE-2019-14498 |
high | 7.8 | 0.0152 | 2026-11-02 | A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media | |
CVE-2019-14438 |
high | 7.8 | 0.0182 | 2026-11-02 | A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VL | |
CVE-2019-14437 |
high | 7.8 | 0.0150 | 2026-11-02 | The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7. |