Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-119189 |
medium | 5.9 | 0.0017 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-119188 |
high | 7.5 | 0.0042 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-119187 |
high | 7.5 | 0.0042 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-90532 |
critical | 10.0 | 0.0083 | 2026-10-29 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that coul | |
CVE-2026-90531 |
critical | 9.6 | 0.0140 | 2026-10-29 | Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Ref | |
CVE-2026-83960 |
medium | 5.4 | 0.0020 | 2026-10-29 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerabili | |
CVE-2026-110079 |
medium | 5.4 | 0.0019 | 2026-10-29 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerabili | |
CVE-2026-63889 |
high | 8.1 | 0.0036 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_ | |
CVE-2026-119251 |
medium | 6.7 | 0.0015 | 2026-10-29 | A malicious actor with local access and high privileges could exploit an Improper Access C | |
CVE-2026-119250 |
high | 7.8 | 0.0030 | 2026-10-29 | A malicious actor with local access and low privileges could exploit an External Control o | |
CVE-2026-118774 |
medium | 5.3 | 0.0010 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-118773 |
medium | 6.3 | 0.0035 | 2026-10-29 | Glob matches files using patterns the shell uses. From 9.0.0 until 14.0.2, abort branches | |
CVE-2026-58120 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-58119 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-58118 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-118776 |
medium | 5.3 | 0.0014 | 2026-10-29 | 1 PoC | Forge (also called node-forge) is a native implementation of Transport Layer Security in J |
CVE-2026-118775 |
medium | 5.3 | 0.0031 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-103094 |
high | 7.1 | 0.0027 | 2026-10-29 | ServiceNow has remediated an information disclosure vulnerability that was identified in t | |
CVE-2026-118780 |
low | 3.7 | 0.0018 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-118779 |
high | 7.5 | 0.0067 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-118778 |
medium | 5.9 | 0.0022 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-118777 |
medium | 6.5 | 0.0027 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-6877 |
medium | 5.3 | 0.0034 | 2026-10-29 | ServiceNow has addressed a domain separation bypass security issue that was identified in | |
CVE-2026-118782 |
high | 7.5 | 0.0012 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-118781 |
medium | 5.3 | 0.0025 | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-103093 |
critical | 9.4 | 0.0043 | 2026-10-29 | ServiceNow has remediated a sandbox escape security issue that was identified in the Servi | |
CVE-2026-110078 |
medium | 5.4 | 0.0019 | 2026-10-29 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerabili | |
CVE-2026-92287 |
high | 8.1 | 0.0035 | 2026-10-29 | Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow vers | |
CVE-2026-91223 |
high | 8.8 | 0.0040 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91222 |
critical | 9.9 | 0.0040 | 2026-10-29 | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Mid | |
CVE-2026-91221 |
critical | 10.0 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-56776 |
medium | 5.3 | 0.0028 | 2026-10-29 | n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /work | |
CVE-2026-56775 |
medium | 5.3 | 0.0030 | 2026-10-29 | n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three m | |
CVE-2026-56359 |
medium | 4.8 | 0.0024 | 2026-10-29 | n8n before 2.8.0 contains a cross-site scripting vulnerability in the credential managemen | |
CVE-2026-56358 |
medium | 5.1 | 0.0024 | 2026-10-29 | n8n before 1.123.25 (1.x) and before 2.11.2 (2.x), with the fix also included in 2.12.0, c | |
CVE-2026-56356 |
medium | 5.1 | 0.0025 | 2026-10-29 | n8n contains a stored cross-site scripting vulnerability in the Chat Trigger node's Custom | |
CVE-2026-56354 |
medium | 5.1 | 0.0024 | 2026-10-29 | n8n before 1.123.24, 2.10.4, and 2.12.0 (across its 1.x and 2.x branches) contains cross-s | |
CVE-2026-111088 |
medium | 6.5 | 0.0022 | 2026-10-29 | A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen. | |
CVE-2026-108087 |
high | 8.8 | 0.0043 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL | |
CVE-2026-108086 |
high | 7.5 | 0.0042 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTD | |
CVE-2026-9536 |
high | 7.5 | 0.0031 | 2026-10-29 | A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOf | |
CVE-2026-9535 |
high | 8.2 | 0.0026 | 2026-10-29 | A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality | |
CVE-2026-8824 |
high | 7.5 | 0.0031 | 2026-10-29 | A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation fu | |
CVE-2026-8822 |
high | 7.5 | 0.0031 | 2026-10-29 | A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of | |
CVE-2026-42057 |
high | 7.5 | 0.0028 | 2026-10-29 | An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdat | |
CVE-2026-41216 |
high | 7.5 | 0.0028 | 2026-10-29 | An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformatio | |
CVE-2026-119249 |
high | 7.5 | 0.0034 | 2026-10-29 | A malicious actor with access to the network could exploit a Binding to an Unrestricted IP | |
CVE-2026-119168 |
high | 8.8 | 0.0013 | 2026-10-29 | HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-clien | |
CVE-2026-118772 |
high | 7.5 | 0.0047 | 2026-10-29 | joi is a schema description language and data validator for JavaScript. From 17.1.1 until | |
CVE-2026-51912 |
critical | 9.8 | 0.0075 | 2026-10-29 | OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-p |