Browse All CVEs
3,597 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-58630 |
critical | 10.0 | 0.0086 | 2026-10-29 | Improper access control in Azure App Service allows an unauthorized attacker to elevate pr | |
CVE-2026-48021 |
critical | 9.1 | 0.0019 | 2026-10-29 | In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection | |
CVE-2026-62835 |
critical | 9.3 | 0.0097 | 2026-10-29 | Improper authorization in Azure Portal allows an unauthorized attacker to disclose informa | |
CVE-2026-61884 |
critical | 9.3 | 0.0056 | 2026-10-29 | The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended f | |
CVE-2026-16280 |
critical | 9.8 | 0.0053 | 2026-10-29 | An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit | |
CVE-2026-16766 |
critical | 9.8 | 0.0257 | 2026-10-29 | Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection ( | |
CVE-2026-64439 |
critical | 9.8 | 0.0063 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter | |
CVE-2026-66012 |
critical | 10.0 | 0.0076 | 2026-10-29 | SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kerne | |
CVE-2026-48144 |
critical | 9.1 | 0.0040 | 2026-10-29 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_gli | |
CVE-2026-55971 |
critical | 9.3 | 0.0098 | 2026-10-29 | Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affect | |
CVE-2026-65766 |
critical | 9.2 | 0.0040 | 2026-10-29 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6. | |
CVE-2026-65876 |
critical | 9.2 | 0.0039 | 2026-10-29 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6. | |
CVE-2026-65879 |
critical | 9.8 | 0.0051 | 2026-10-29 | Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wi | |
CVE-2026-59527 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. | |
CVE-2026-59533 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions. | |
CVE-2026-59538 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions. | |
CVE-2026-59549 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 v | |
CVE-2026-59550 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions. | |
CVE-2026-16812 |
critical | 10.0 | 0.0176 | 2026-10-29 | KEV | Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that |
CVE-2026-55953 |
critical | 9.1 | 0.0023 | 2026-10-29 | The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher s | |
CVE-2026-66394 |
critical | 9.3 | 0.0034 | 2026-10-29 | SiYuan before v3.7.3 contains stored and reflected cross-site scripting vulnerabilities in | |
CVE-2026-66395 |
critical | 9.4 | 0.0056 | 2026-10-29 | SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in th | |
CVE-2026-66396 |
critical | 9.3 | 0.0054 | 2026-10-29 | SiYuan before v3.7.2 fails to escape the title-img Individual Attribute List value when re | |
CVE-2026-66398 |
critical | 9.4 | 0.0041 | 2026-10-29 | phpMyFAQ before v4.1.6 contains a remote code execution vulnerability in the configuration | |
CVE-2026-63077 |
critical | 9.8 | 0.9356 | 2026-10-29 | KEV | JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could a |
CVE-2026-17552 |
critical | 9.1 | 0.0054 | 2026-10-29 | Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via un | |
CVE-2026-48030 |
critical | 9.9 | 0.0755 | 2026-10-29 | Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to be | |
CVE-2026-28911 |
critical | 9.8 | 0.0050 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma | |
CVE-2026-28982 |
critical | 9.8 | 0.0056 | 2026-10-29 | A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia | |
CVE-2026-39873 |
critical | 9.8 | 0.0059 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-43682 |
critical | 9.8 | 0.0072 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-43694 |
critical | 9.8 | 0.0059 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-43710 |
critical | 9.8 | 0.0059 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-43748 |
critical | 9.8 | 0.0059 | 2026-10-29 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi | |
CVE-2026-43750 |
critical | 9.8 | 0.0077 | 2026-10-29 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macO | |
CVE-2026-43757 |
critical | 9.8 | 0.0060 | 2026-10-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in | |
CVE-2026-43764 |
critical | 9.8 | 0.0059 | 2026-10-29 | An integer overflow was addressed with improved input validation. This issue is fixed in m | |
CVE-2026-43773 |
critical | 9.8 | 0.0059 | 2026-10-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in | |
CVE-2026-43779 |
critical | 9.8 | 0.0054 | 2026-10-29 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequo | |
CVE-2026-43793 |
critical | 9.8 | 0.0059 | 2026-10-29 | An issue existed in the handling of environment variables. This issue was addressed with i | |
CVE-2026-43802 |
critical | 9.8 | 0.0060 | 2026-10-29 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi | |
CVE-2026-43809 |
critical | 9.8 | 0.0060 | 2026-10-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in | |
CVE-2026-64691 |
critical | 9.8 | 0.0047 | 2026-10-29 | A buffer overflow was addressed with improved size validation. This issue is fixed in macO | |
CVE-2026-64694 |
critical | 9.8 | 0.0059 | 2026-10-29 | An integer overflow was addressed with improved input validation. This issue is fixed in m | |
CVE-2026-64695 |
critical | 9.8 | 0.0073 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 | |
CVE-2026-64696 |
critical | 9.8 | 0.0072 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-64697 |
critical | 9.8 | 0.0059 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-64698 |
critical | 9.8 | 0.0059 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-64702 |
critical | 9.8 | 0.0054 | 2026-10-29 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in | |
CVE-2026-64703 |
critical | 9.8 | 0.0057 | 2026-10-29 | A use after free issue was addressed with improved memory management. This issue is fixed |