Browse All CVEs
10,479 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-90726 |
medium | 6.0 | 0.0012 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 relea | |
CVE-2026-105987 |
medium | 5.1 | 0.0024 | 2026-10-29 | KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lac | |
CVE-2026-117505 |
medium | 5.3 | 0.0031 | 2026-10-29 | A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted | |
CVE-2026-117506 |
medium | 5.3 | 0.0031 | 2026-10-29 | A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the | |
CVE-2026-117507 |
medium | 5.3 | 0.0034 | 2026-10-29 | A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This | |
CVE-2026-104381 |
medium | 6.0 | 0.0013 | 2026-10-29 | A missing authentication vulnerability in Fireware OS's FireCluster state synchronization | |
CVE-2026-113881 |
medium | 6.1 | 0.0036 | 2026-10-29 | A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcemen | |
CVE-2026-115495 |
medium | 5.7 | 0.0008 | 2026-10-29 | Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN | |
CVE-2026-117509 |
medium | 5.3 | 0.0041 | 2026-10-29 | A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Affected is the functi | |
CVE-2026-117511 |
medium | 5.5 | 0.0163 | 2026-10-29 | A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by th | |
CVE-2026-82332 |
medium | 5.7 | 0.0012 | 2026-10-29 | An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-facto | |
CVE-2025-64394 |
medium | 4.3 | 0.0011 | 2026-10-29 | A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM | |
CVE-2026-106078 |
medium | 6.9 | 0.0026 | 2026-10-29 | A vulnerability allowing an unauthenticated attacker to bypass REST API authentication wit | |
CVE-2026-108140 |
medium | 5.9 | 0.0036 | 2026-10-29 | A vulnerability allowing an authenticated user with the Restore Operator role, who also co | |
CVE-2026-108141 |
medium | 5.9 | 0.0036 | 2026-10-29 | A vulnerability allowing an authenticated user with the Restore Operator role, who also co | |
CVE-2026-109088 |
medium | 6.5 | 0.0027 | 2026-10-29 | A malicious X server could send malformed RECORD EnableContext reolies that can cause a X | |
CVE-2026-112353 |
medium | 6.2 | 0.0024 | 2026-10-29 | GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site script | |
CVE-2026-116674 |
medium | 6.5 | 0.0029 | 2026-10-29 | systeminformation is a System and OS information library for node.js. Prior to 5.33.13, ne | |
CVE-2026-117512 |
medium | 6.9 | 0.0037 | 2026-10-29 | A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown p | |
CVE-2026-117513 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability a | |
CVE-2026-117514 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects s | |
CVE-2026-48380 |
medium | 5.5 | 0.0019 | 2026-10-29 | Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead t | |
CVE-2026-54462 |
medium | 6.5 | 0.0038 | 2026-10-29 | Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20 | |
CVE-2026-57185 |
medium | 6.5 | 0.0048 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-57194 |
medium | 5.9 | 0.0044 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-77172 |
medium | 5.3 | 0.0027 | 2026-10-29 | App passwords were allowed to bypass password confirmation on sensitive endpoints. | |
CVE-2026-77173 |
medium | 4.3 | 0.0021 | 2026-10-29 | A user could create a docx or odt file with a # in the filename with confidential informat | |
CVE-2026-82984 |
medium | 4.3 | 0.0027 | 2026-10-29 | When a team was configured as "visible to everyone", the web UI correctly blocked non-memb | |
CVE-2026-82986 |
medium | 4.6 | 0.0016 | 2026-10-29 | The user in a group can bypass the group restriction set by an administrator on link shari | |
CVE-2026-87897 |
medium | 4.6 | 0.0020 | 2026-10-29 | A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs t | |
CVE-2026-102812 |
medium | 6.9 | 0.0012 | 2026-10-29 | A hard-coded cryptographic key vulnerability exists in the user-configuration backup mecha | |
CVE-2026-102813 |
medium | 6.1 | 0.0020 | 2026-10-29 | An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. | |
CVE-2026-102815 |
medium | 6.9 | 0.0060 | 2026-10-29 | An operating-system command injection vulnerability exists in the tmpServer service of TP- | |
CVE-2026-102816 |
medium | 5.3 | 0.0017 | 2026-10-29 | An authorization vulnerability exists in the country or region configuration interface of | |
CVE-2026-108301 |
medium | 6.0 | 0.0014 | 2026-10-29 | Tanium addressed an improper access controls vulnerability in Comply. | |
CVE-2026-108302 |
medium | 4.3 | 0.0017 | 2026-10-29 | Tanium addressed an improper access controls vulnerability in Comply. | |
CVE-2026-108308 |
medium | 6.5 | 0.0035 | 2026-10-29 | Tanium addressed a SQL injection vulnerability in Patch. | |
CVE-2026-108309 |
medium | 5.5 | 0.0011 | 2026-10-29 | Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client | |
CVE-2026-108310 |
medium | 5.3 | 0.0031 | 2026-10-29 | Tanium addressed a denial of service vulnerability in Tanium Server. | |
CVE-2026-108313 |
medium | 6.6 | 0.0030 | 2026-10-29 | Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. | |
CVE-2026-108316 |
medium | 4.3 | 0.0025 | 2026-10-29 | Tanium addressed an information disclosure vulnerability in Tanium Server. | |
CVE-2026-108325 |
medium | 6.6 | 0.0024 | 2026-10-29 | Tanium addressed an insertion of sensitive information into log file vulnerability in Repu | |
CVE-2026-108326 |
medium | 6.5 | 0.0018 | 2026-10-29 | Tanium addressed an improper certificate validation vulnerability in Stream Client Extensi | |
CVE-2026-108328 |
medium | 4.2 | 0.0023 | 2026-10-29 | Tanium addressed an insertion of sensitive information into log file vulnerability in Thre | |
CVE-2026-108332 |
medium | 6.3 | 0.0015 | 2026-10-29 | Tanium addressed an improper link resolution before file access vulnerability in Threat Re | |
CVE-2026-116657 |
medium | 5.3 | 0.0034 | 2026-10-29 | Tanium addressed a denial of service vulnerability in Enforce. | |
CVE-2026-116658 |
medium | 6.5 | 0.0034 | 2026-10-29 | Tanium addressed a denial of service vulnerability in Enforce. | |
CVE-2026-116659 |
medium | 4.3 | 0.0030 | 2026-10-29 | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. | |
CVE-2026-116660 |
medium | 4.3 | 0.0023 | 2026-10-29 | Tanium addressed an improper access controls vulnerability in Enforce. | |
CVE-2026-116677 |
medium | 5.3 | 0.0018 | 2026-10-29 | OpenWISP Controller is a network and WiFi controller for provisioning, configuration manag |