Browse All CVEs
31,846 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-63907 |
high | 7.8 | 0.0020 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: uio: uio_pci_generic_ | |
CVE-2026-63951 |
high | 7.8 | 0.0018 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-f | |
CVE-2026-63953 |
medium | 5.5 | 0.0020 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fi | |
CVE-2026-63954 |
high | 7.8 | 0.0017 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: hpfs: fix a crash if | |
CVE-2026-63955 |
high | 7.5 | 0.0049 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: do not tr | |
CVE-2026-63956 |
high | 7.8 | 0.0022 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_ | |
CVE-2026-63957 |
high | 7.8 | 0.0022 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe_ser | |
CVE-2026-63958 |
medium | 5.5 | 0.0021 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: val | |
CVE-2026-63960 |
medium | 5.5 | 0.0021 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: wcove: do | |
CVE-2026-63961 |
medium | 5.5 | 0.0022 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/ | |
CVE-2026-108696 |
medium | 5.3 | 0.0022 | 2026-10-30 | CoreShop through 1.5.5 contains an authorization bypass vulnerability in the OrderControll | |
CVE-2026-61708 |
high | 8.5 | — | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-61728 |
critical | 9.9 | — | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-119680 |
high | 8.5 | — | 2026-10-30 | A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoin | |
CVE-2026-119682 |
high | 7.9 | — | 2026-10-30 | An improper access control vulnerability exists in the multi-factor authentication (MFA) f | |
CVE-2026-119664 |
medium | 5.3 | — | 2026-10-30 | Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerabilit | |
CVE-2026-119665 |
medium | 5.3 | — | 2026-10-30 | WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledT | |
CVE-2026-119662 |
high | 8.7 | — | 2026-10-30 | Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows ad | |
CVE-2026-119663 |
medium | 5.3 | — | 2026-10-30 | Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability | |
CVE-2026-119660 |
critical | 9.3 | — | 2026-10-30 | MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthent | |
CVE-2026-119661 |
low | 2.3 | — | 2026-10-30 | ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescL | |
CVE-2026-119658 |
medium | 5.3 | — | 2026-10-30 | PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allow | |
CVE-2026-119659 |
medium | 5.3 | — | 2026-10-30 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenti | |
CVE-2026-119656 |
high | 8.7 | — | 2026-10-30 | CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerabilit | |
CVE-2026-119657 |
low | 2.3 | — | 2026-10-30 | FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/libr | |
CVE-2026-119654 |
high | 8.7 | — | 2026-10-30 | DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any au | |
CVE-2026-119655 |
high | 8.7 | — | 2026-10-30 | CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/ | |
CVE-2026-119652 |
medium | 5.3 | — | 2026-10-30 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in Fr | |
CVE-2026-119653 |
medium | 5.3 | — | 2026-10-30 | Nging through 5.3.5 contains an information disclosure vulnerability that allows any authe | |
CVE-2026-119650 |
medium | 5.3 | — | 2026-10-30 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in Pr | |
CVE-2026-119651 |
medium | 5.3 | — | 2026-10-30 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in Fe | |
CVE-2026-119648 |
medium | 5.3 | — | 2026-10-30 | Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerabil | |
CVE-2026-119649 |
high | 7.1 | — | 2026-10-30 | Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaL | |
CVE-2026-119646 |
medium | 5.3 | — | 2026-10-30 | Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authe | |
CVE-2026-119647 |
medium | 5.3 | — | 2026-10-30 | RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServ | |
CVE-2026-119644 |
medium | 5.3 | — | 2026-10-30 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenti | |
CVE-2026-119645 |
high | 7.1 | — | 2026-10-30 | ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc( | |
CVE-2026-111487 |
medium | 4.3 | — | 2026-10-30 | An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the | |
CVE-2026-112905 |
critical | 9.0 | — | 2026-10-30 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-110799 |
critical | 9.8 | — | 2026-10-30 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-63909 |
high | 8.1 | 0.0063 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regre | |
CVE-2026-63910 |
high | 7.8 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: fix UAF in d | |
CVE-2026-63911 |
high | 7.8 | 0.0017 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: reset ru | |
CVE-2026-63918 |
high | 7.8 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcount_in | |
CVE-2026-63928 |
high | 7.8 | 0.0022 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: | |
CVE-2026-63929 |
medium | 5.5 | 0.0021 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA | |
CVE-2026-63930 |
high | 7.8 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consu | |
CVE-2026-63931 |
medium | 5.5 | 0.0021 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: | |
CVE-2026-63932 |
medium | 5.5 | 0.0021 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: mhz19b | |
CVE-2026-63933 |
medium | 5.5 | 0.0022 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16260: |