Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-107261 |
medium | 4.2 | 0.0019 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authentic | |
CVE-2026-107260 |
medium | 6.5 | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-107259 |
medium | 5.4 | 0.0018 | 2026-10-30 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Dru | |
CVE-2026-107258 |
medium | 5.4 | 0.0017 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful | |
CVE-2026-107257 |
medium | 6.5 | 0.0019 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This i | |
CVE-2026-107256 |
medium | 5.3 | 0.0027 | 2026-10-30 | Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield a | |
CVE-2026-107255 |
high | 7.3 | 0.0022 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Brows | |
CVE-2026-107254 |
medium | 4.8 | 0.0022 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authentic | |
CVE-2026-107253 |
medium | 5.9 | 0.0020 | 2026-10-30 | Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: *.*. | |
CVE-2026-107252 |
medium | 5.4 | 0.0015 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-107251 |
medium | 6.5 | 0.0020 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) | |
CVE-2026-107250 |
medium | 5.9 | 0.0020 | 2026-10-30 | Vulnerability in Drupal ECA Helper. This issue affects ECA Helper versions: *.*. | |
CVE-2026-107249 |
critical | 9.8 | 0.0039 | 2026-10-30 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili | |
CVE-2026-20589 |
medium | 6.7 | 0.0011 | 2026-10-30 | In venc, there is a possible out of bounds write due to type confusion. This could lead to | |
CVE-2026-20588 |
medium | 6.7 | 0.0011 | 2026-10-30 | In mtee, there is a possible escalation of privilege due to a missing bounds check. This c | |
CVE-2026-20587 |
medium | 6.7 | 0.0011 | 2026-10-30 | In mtee, there is a possible escalation of privilege due to type confusion. This could lea | |
CVE-2026-20586 |
high | 8.8 | 0.0039 | 2026-10-30 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could | |
CVE-2026-20579 |
medium | 6.7 | 0.0011 | 2026-10-30 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to | |
CVE-2026-74915 |
high | 8.8 | 0.0027 | 2026-10-30 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process ca | |
CVE-2026-74912 |
critical | 9.8 | 0.0029 | 2026-10-30 | On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping | |
CVE-2026-19199 |
high | 7.1 | 0.0011 | 2026-10-30 | Software installed and run as a non-privileged user may conduct improper system calls to a | |
CVE-2026-18629 |
high | 7.5 | 0.0026 | 2026-10-30 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process a | |
CVE-2026-65586 |
high | 7.1 | 0.0010 | 2026-10-30 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-65584 |
high | 7.8 | 0.0015 | 2026-10-30 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-65587 |
medium | 5.5 | 0.0010 | 2026-10-30 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process ca | |
CVE-2026-91920 |
medium | 6.5 | 0.0024 | 2026-10-30 | A flaw was found in the ChunkReader component of the Undertow web server, which is used to | |
CVE-2026-11822 |
medium | 6.8 | 0.0019 | 2026-10-30 | SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text se | |
CVE-2025-6170 |
low | 2.5 | 0.0034 | 2026-10-30 | A flaw was found in the interactive shell of the xmllint command-line tool, used for parsi | |
CVE-2026-15466 |
high | 7.0 | 0.0013 | 2026-10-30 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-118475 |
low | 3.6 | 0.0011 | 2026-10-30 | A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing ma | |
CVE-2026-112922 |
low | 3.3 | 0.0014 | 2026-10-30 | A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by ent | |
CVE-2026-15801 |
high | 8.0 | 0.0048 | 2026-10-30 | A vulnerability was found in CRI-O related to the container checkpoint and restore feature | |
CVE-2026-76031 |
high | 8.8 | 0.0026 | 2026-10-30 | Incorrect authorization in Input in Google Chrome prior to 156.0.8078.79 allowed a remote | |
CVE-2026-76030 |
high | 8.8 | 0.0023 | 2026-10-30 | Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a re | |
CVE-2026-76029 |
high | 8.8 | 0.0022 | 2026-10-30 | Improper input validation in Network in Google Chrome prior to 156.0.8078.79 allowed a rem | |
CVE-2026-76028 |
high | 8.8 | 0.0023 | 2026-10-30 | Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a re | |
CVE-2026-76027 |
medium | 4.3 | 0.0023 | 2026-10-30 | Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote | |
CVE-2026-76026 |
high | 8.8 | 0.0017 | 2026-10-30 | Origin validation error in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remo | |
CVE-2026-76025 |
high | 8.8 | 0.0029 | 2026-10-30 | Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a re | |
CVE-2026-76024 |
medium | 6.5 | 0.0026 | 2026-10-30 | Use after free in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote att | |
CVE-2026-119272 |
medium | 4.3 | 0.0016 | 2026-10-30 | Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a re | |
CVE-2026-119271 |
high | 8.8 | 0.0022 | 2026-10-30 | Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote at | |
CVE-2026-119270 |
high | 8.8 | 0.0023 | 2026-10-30 | Incorrect reference resolution in CacheStorage in Google Chrome prior to 156.0.8078.79 all | |
CVE-2026-119269 |
high | 8.8 | 0.0021 | 2026-10-30 | Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote | |
CVE-2026-119268 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacke | |
CVE-2026-119267 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to | |
CVE-2026-119266 |
high | 8.8 | 0.0026 | 2026-10-30 | Incorrect reference resolution in Quota in Google Chrome prior to 156.0.8078.79 allowed a | |
CVE-2026-119265 |
high | 8.8 | 0.0022 | 2026-10-30 | Incorrect reference resolution in Quota in Google Chrome prior to 156.0.8078.79 allowed a | |
CVE-2026-119264 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker t | |
CVE-2026-119263 |
critical | 9.6 | 0.0027 | 2026-10-30 | Use after free in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remo |