Browse All CVEs
50,472 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2019-12874 |
critical | 9.8 | 0.0239 | 2026-11-02 | An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN | |
CVE-2019-12439 |
high | 7.8 | 0.0058 | 2026-11-02 | bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount p | |
CVE-2026-120630 |
critical | 9.1 | 0.0029 | 2026-11-02 | CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both | |
CVE-2026-120627 |
high | 7.5 | 0.0029 | 2026-11-02 | The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired aut | |
CVE-2026-119085 |
critical | 9.4 | 0.0055 | 2026-11-02 | Improper neutralization of special elements used in a template engine in the publishing co | |
CVE-2024-12139 |
medium | 4.3 | 0.0021 | 2026-11-02 | The error handling implementation fails to properly sanitize or validate user-supplied inp | |
CVE-2019-14970 |
high | 7.8 | 0.0194 | 2026-11-02 | A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote | |
CVE-2019-14778 |
high | 7.8 | 0.0146 | 2026-11-02 | The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC m | |
CVE-2019-14777 |
high | 7.8 | 0.0146 | 2026-11-02 | The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-a | |
CVE-2019-14776 |
high | 7.8 | 0.0154 | 2026-11-02 | A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC med | |
CVE-2019-14535 |
high | 7.8 | 0.0154 | 2026-11-02 | A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC | |
CVE-2026-84683 |
high | 8.7 | 0.0026 | 2026-11-02 | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The HTML | |
CVE-2026-84502 |
critical | 9.9 | 0.0063 | 2026-11-02 | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The Proj | |
CVE-2026-34118 |
high | 7.1 | 0.0045 | 2026-11-02 | A heap-based buffer overflow vulnerability was identified in multiple TP-Link Tapo cameras | |
CVE-2019-5439 |
medium | 6.5 | 0.0529 | 2026-11-02 | A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further | |
CVE-2019-5413 |
critical | 9.8 | 0.0340 | 2026-11-02 | 3 PoC | An attacker can use the format parameter to inject arbitrary commands in the npm package m |
CVE-2019-20454 |
high | 7.5 | 0.0156 | 2026-11-02 | An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compi | |
CVE-2019-1552 |
low | 3.3 | 0.0069 | 2026-11-02 | OpenSSL has internal defaults for a directory tree where it can find a configuration file | |
CVE-2019-1543 |
high | 7.4 | 0.0570 | 2026-11-02 | ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryptio | |
CVE-2019-15291 |
medium | 4.6 | 0.0067 | 2026-11-02 | An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer derefer | |
CVE-2026-111048 |
high | 8.4 | 0.0028 | 2026-11-02 | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8 | |
CVE-2026-106808 |
high | 7.5 | 0.0053 | 2026-11-02 | OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in th | |
CVE-2026-106806 |
high | 7.5 | 0.0044 | 2026-11-02 | A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated head | |
CVE-2026-15809 |
high | 7.8 | 0.0018 | 2026-11-02 | A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorr | |
CVE-2020-8169 |
high | 7.5 | 0.0393 | 2026-11-02 | curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that c | |
CVE-2020-35538 |
medium | 5.5 | 0.0029 | 2026-11-02 | A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when pr | |
CVE-2020-1002 |
high | 7.1 | 0.0074 | 2026-11-02 | An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows | |
CVE-2020-11022 |
medium | 6.1 | 0.9921 | 2026-11-02 | 3 PoC | In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - eve |
CVE-2019-9937 |
high | 7.5 | 0.0614 | 2026-11-02 | In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtu | |
CVE-2019-9936 |
high | 7.5 | 0.0535 | 2026-11-02 | In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-ba | |
CVE-2019-7364 |
high | 7.8 | 0.0189 | 2026-11-02 | DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced S | |
CVE-2026-20500 |
medium | 5.0 | 0.0012 | 2026-11-02 | In Modem, there is a possible system crash due to improper input validation. This could le | |
CVE-2026-20433 |
high | 8.8 | 0.0031 | 2026-11-02 | In Modem, there is a possible out of bounds write due to a missing bounds check. This coul | |
CVE-2026-12701 |
critical | 9.0 | 0.0119 | 2026-11-02 | A path traversal vulnerability was found in pulpcore. The relative_path_validator function | |
CVE-2026-117068 |
high | 7.5 | 0.0042 | 2026-11-02 | An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v | |
CVE-2026-65059 |
high | 7.5 | 0.0052 | 2026-11-02 | Furl versions before 3.16 for Perl allow memory exhaustion via unbounded decompression of | |
CVE-2026-120596 |
high | 7.5 | 0.0037 | 2026-11-02 | A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of | |
CVE-2026-106804 |
high | 7.5 | 0.0057 | 2026-11-02 | A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn modu | |
CVE-2026-106803 |
critical | 9.8 | 0.0050 | 2026-11-02 | A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pc | |
CVE-2026-20526 |
high | 7.1 | 0.0021 | 2026-11-02 | In Modem, there is a possible out of bounds write due to a missing bounds check. This coul | |
CVE-2026-20518 |
medium | 4.2 | 0.0012 | 2026-11-02 | In geniezone, there is a possible information disclosure due to a missing bounds check. Th | |
CVE-2026-20515 |
medium | 5.0 | 0.0011 | 2026-11-02 | In gpu, there is a possible system crash due to use after free. This could lead to local i | |
CVE-2026-88810 |
high | 7.2 | 0.0048 | 2026-11-02 | A privilege escalation issue was discovered in Rancher Manager's role-based access control | |
CVE-2026-106805 |
high | 7.5 | 0.0034 | 2026-11-02 | A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment fai | |
CVE-2026-93753 |
— | — | 0.0051 | 2026-11-02 | Rejected reason: This CVE ID has been rejected because it does not describe a security vul | |
CVE-2026-119301 |
medium | 5.0 | 0.0035 | 2026-11-02 | Improper neutralization of quoting syntax in SQL identifier construction in the Apache Ice | |
CVE-2026-109553 |
high | 7.5 | 0.0018 | 2026-11-02 | Gitea resolved the principals of an SSH certificate by searching the content of all stored | |
CVE-2026-88811 |
critical | 9.1 | 0.0043 | 2026-11-02 | Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher cre | |
CVE-2026-105769 |
critical | 9.3 | 0.0020 | 2026-11-02 | kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Reso | |
CVE-2026-106807 |
— | — | 0.0015 | 2026-11-02 | A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handlin |