Browse All CVEs
50,445 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-63897 |
medium | 5.5 | 0.0017 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232 | |
CVE-2026-63880 |
medium | 5.5 | 0.0012 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lock | |
CVE-2026-63878 |
medium | 5.5 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check num | |
CVE-2026-63877 |
medium | 5.5 | 0.0017 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert t | |
CVE-2026-63876 |
medium | 5.5 | 0.0017 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert t | |
CVE-2026-63875 |
high | 7.8 | 0.0018 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush wal | |
CVE-2026-63874 |
high | 7.8 | 0.0013 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix r | |
CVE-2026-63873 |
medium | 5.5 | 0.0012 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mm | |
CVE-2024-40637 |
high | 7.3 | 0.0037 | 2026-10-30 | dbt enables data analysts and engineers to transform their data using the same practices t | |
CVE-2026-108696 |
medium | 5.3 | 0.0022 | 2026-10-30 | CoreShop through 1.5.5 contains an authorization bypass vulnerability in the OrderControll | |
CVE-2026-61728 |
critical | 9.9 | 0.0046 | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-61708 |
high | 8.5 | 0.0040 | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-119682 |
high | 7.9 | 0.0034 | 2026-10-30 | An improper access control vulnerability exists in the multi-factor authentication (MFA) f | |
CVE-2026-119680 |
high | 8.5 | 0.0024 | 2026-10-30 | A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoin | |
CVE-2026-119665 |
medium | 5.3 | 0.0039 | 2026-10-30 | WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledT | |
CVE-2026-119664 |
medium | 5.3 | 0.0029 | 2026-10-30 | Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerabilit | |
CVE-2026-119663 |
medium | 5.3 | 0.0027 | 2026-10-30 | Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability | |
CVE-2026-119662 |
high | 8.7 | 0.0043 | 2026-10-30 | Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows ad | |
CVE-2026-119661 |
low | 2.3 | 0.0038 | 2026-10-30 | ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescL | |
CVE-2026-119660 |
critical | 9.3 | 0.0052 | 2026-10-30 | MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthent | |
CVE-2026-119659 |
medium | 5.3 | 0.0026 | 2026-10-30 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenti | |
CVE-2026-119658 |
medium | 5.3 | 0.0041 | 2026-10-30 | PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allow | |
CVE-2026-119657 |
low | 2.3 | 0.0033 | 2026-10-30 | FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/libr | |
CVE-2026-119656 |
high | 8.7 | 0.0034 | 2026-10-30 | CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerabilit | |
CVE-2026-119655 |
high | 8.7 | 0.0034 | 2026-10-30 | CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/ | |
CVE-2026-119654 |
high | 8.7 | 0.0050 | 2026-10-30 | DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any au | |
CVE-2026-119653 |
medium | 5.3 | 0.0035 | 2026-10-30 | Nging through 5.3.5 contains an information disclosure vulnerability that allows any authe | |
CVE-2026-119652 |
medium | 5.3 | 0.0028 | 2026-10-30 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in Fr | |
CVE-2026-119651 |
medium | 5.3 | 0.0031 | 2026-10-30 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in Fe | |
CVE-2026-119650 |
medium | 5.3 | 0.0030 | 2026-10-30 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in Pr | |
CVE-2026-119649 |
high | 7.1 | 0.0036 | 2026-10-30 | Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaL | |
CVE-2026-119648 |
medium | 5.3 | 0.0029 | 2026-10-30 | Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerabil | |
CVE-2026-119647 |
medium | 5.3 | 0.0031 | 2026-10-30 | RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServ | |
CVE-2026-119646 |
medium | 5.3 | 0.0046 | 2026-10-30 | Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authe | |
CVE-2026-119645 |
high | 7.1 | 0.0039 | 2026-10-30 | ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc( | |
CVE-2026-119644 |
medium | 5.3 | 0.0033 | 2026-10-30 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenti | |
CVE-2026-112905 |
critical | 9.0 | 0.0050 | 2026-10-30 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-111487 |
medium | 4.3 | 0.0013 | 2026-10-30 | An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the | |
CVE-2026-110799 |
critical | 9.8 | 0.0071 | 2026-10-30 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-49116 |
— | — | — | 2026-10-30 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-49115 |
— | — | — | 2026-10-30 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-117350 |
medium | 6.5 | 0.0034 | 2026-10-30 | Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. | |
CVE-2026-112348 |
medium | 6.9 | 0.0029 | 2026-10-30 | Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that all | |
CVE-2026-100355 |
low | 3.1 | 0.0028 | 2026-10-30 | Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire me | |
CVE-2026-91236 |
critical | 9.8 | 0.0047 | 2026-10-30 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91235 |
critical | 9.8 | 0.0047 | 2026-10-30 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91234 |
critical | 9.8 | 0.0047 | 2026-10-30 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91233 |
critical | 9.8 | 0.0047 | 2026-10-30 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Ente | |
CVE-2026-91214 |
critical | 9.8 | 0.0047 | 2026-10-30 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-63950 |
high | 7.8 | 0.0017 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize n |