Browse All CVEs
50,444 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-63948 |
medium | 5.5 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix | |
CVE-2026-63943 |
high | 7.1 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out | |
CVE-2026-63936 |
medium | 5.5 | 0.0015 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: mt6359: fix | |
CVE-2026-63935 |
medium | 5.5 | 0.0014 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: nxp-sar-adc | |
CVE-2026-63934 |
high | 7.1 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: itg3200: f | |
CVE-2026-63933 |
medium | 5.5 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16260: | |
CVE-2026-63932 |
medium | 5.5 | 0.0015 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: mhz19b | |
CVE-2026-63931 |
medium | 5.5 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: | |
CVE-2026-63930 |
high | 7.8 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consu | |
CVE-2026-63929 |
medium | 5.5 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA | |
CVE-2026-63928 |
high | 7.8 | 0.0017 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: | |
CVE-2026-63918 |
high | 7.8 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcount_in | |
CVE-2026-63911 |
high | 7.8 | 0.0017 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: reset ru | |
CVE-2026-63910 |
high | 7.8 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: fix UAF in d | |
CVE-2026-63909 |
high | 8.1 | 0.0063 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regre | |
CVE-2026-91915 |
medium | 6.8 | 0.0028 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization o | |
CVE-2026-117028 |
medium | 6.5 | 0.0026 | 2026-10-30 | Skuul School Management System through version 2.6.5 is vulnerable to incorrect access con | |
CVE-2026-115683 |
medium | 6.8 | 0.0022 | 2026-10-30 | A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate | |
CVE-2026-111500 |
high | 8.8 | 0.0027 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for | |
CVE-2026-91914 |
high | 7.1 | 0.0024 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by | |
CVE-2026-111499 |
medium | 5.5 | 0.0013 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assi | |
CVE-2026-91913 |
high | 8.8 | 0.0271 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization o | |
CVE-2026-86715 |
high | 7.1 | 0.0013 | 2026-10-30 | Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technolo | |
CVE-2026-111498 |
medium | 4.4 | 0.0010 | 2026-10-30 | OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vuln | |
CVE-2026-78410 |
high | 7.8 | 0.0020 | 2026-10-30 | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but | |
CVE-2026-78408 |
high | 7.9 | 0.0024 | 2026-10-30 | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves tha | |
CVE-2026-91912 |
medium | 6.5 | 0.0013 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptog | |
CVE-2026-119528 |
high | 7.8 | 0.0019 | 2026-10-30 | A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect | |
CVE-2026-13595 |
medium | 5.3 | 0.0015 | 2026-10-30 | A flaw was found in the libblkid library of util-linux. During nested partition probing, t | |
CVE-2026-13002 |
medium | 4.4 | 0.0015 | 2026-10-30 | Rejected reason: Rejected as this CVE is duplicate to CVE-2026-4890. | |
CVE-2026-119542 |
medium | 4.3 | 0.0033 | 2026-10-30 | A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested | |
CVE-2026-112347 |
high | 7.2 | 0.0028 | 2026-10-30 | Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vuln | |
CVE-2026-107305 |
medium | 5.4 | 0.0036 | 2026-10-30 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability | |
CVE-2026-106634 |
high | 7.7 | 0.0046 | 2026-10-30 | Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restrict | |
CVE-2026-119602 |
medium | 6.3 | 0.0031 | 2026-10-30 | libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in t | |
CVE-2026-119601 |
medium | 6.9 | 0.0012 | 2026-10-30 | AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() t | |
CVE-2026-119600 |
medium | 6.3 | 0.0038 | 2026-10-30 | tcpflow before 1.7.0 contains an out-of-bounds read vulnerability that allows unauthentica | |
CVE-2026-119599 |
medium | 5.3 | 0.0041 | 2026-10-30 | AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows pro | |
CVE-2026-119598 |
medium | 5.3 | 0.0035 | 2026-10-30 | Miaomiaowu before 0.9.3 contains an insecure direct object reference vulnerability in /api | |
CVE-2026-119597 |
critical | 9.3 | 0.0037 | 2026-10-30 | OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows | |
CVE-2026-119596 |
medium | 5.3 | 0.0028 | 2026-10-30 | UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipControll | |
CVE-2026-119578 |
high | 8.5 | 0.0055 | 2026-10-30 | MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg | |
CVE-2026-119577 |
high | 7.6 | 0.0029 | 2026-10-30 | ArcadeDB before 26.10.2 contains an improper authorization vulnerability that allows revok | |
CVE-2026-119576 |
medium | 5.3 | 0.0022 | 2026-10-30 | ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that a | |
CVE-2026-119575 |
high | 7.1 | 0.0026 | 2026-10-30 | ArcadeDB from 26.8.1 before 26.10.2 contains a server-side request forgery vulnerability t | |
CVE-2026-119574 |
high | 8.2 | 0.0028 | 2026-10-30 | Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that a | |
CVE-2026-119573 |
low | 2.1 | 0.0026 | 2026-10-30 | Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NG | |
CVE-2026-119572 |
high | 7.0 | 0.0019 | 2026-10-30 | Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in t | |
CVE-2026-119571 |
medium | 6.3 | 0.0022 | 2026-10-30 | Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies | |
CVE-2026-119570 |
low | 2.3 | 0.0025 | 2026-10-30 | Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerabi |