Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-98059 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark sched_proce | |
CVE-2026-97629 |
medium | 6.5 | 0.0025 | 2026-10-29 | 1 PoC | Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache sh |
CVE-2026-93479 |
high | 8.1 | 0.0120 | 2026-10-29 | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex | |
CVE-2026-111946 |
medium | 5.3 | 0.0034 | 2026-10-29 | Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode number | |
CVE-2026-110688 |
high | 7.5 | 0.0049 | 2026-10-29 | Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revali | |
CVE-2026-110687 |
high | 7.5 | 0.0042 | 2026-10-29 | Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during | |
CVE-2026-60111 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-118769 |
critical | 9.2 | 0.0037 | 2026-10-29 | Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function bot | |
CVE-2026-118768 |
medium | 5.9 | 0.0007 | 2026-10-29 | Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check comma | |
CVE-2026-118767 |
medium | 4.8 | 0.0022 | 2026-10-29 | Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding con | |
CVE-2026-118766 |
medium | 6.1 | 0.0010 | 2026-10-29 | Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a | |
CVE-2026-118765 |
high | 7.3 | 0.0014 | 2026-10-29 | Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls Au | |
CVE-2026-118764 |
medium | 6.9 | 0.0030 | 2026-10-29 | minimatch is a minimal matching utility for converting glob expressions into JavaScript Re | |
CVE-2026-118763 |
high | 7.4 | 0.0030 | 2026-10-29 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to | |
CVE-2026-91218 |
critical | 9.6 | 0.0034 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91215 |
high | 8.8 | 0.0040 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91213 |
high | 8.8 | 0.0040 | 2026-10-29 | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Mid | |
CVE-2026-110686 |
medium | 6.5 | 0.0043 | 2026-10-29 | Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter re | |
CVE-2026-110685 |
critical | 9.1 | 0.0051 | 2026-10-29 | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged valu | |
CVE-2026-110684 |
high | 8.1 | 0.0045 | 2026-10-29 | Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overload | |
CVE-2026-104795 |
high | 8.8 | 0.0018 | 2026-10-29 | The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans | |
CVE-2026-91814 |
medium | 5.5 | 0.0010 | 2026-10-29 | A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incre | |
CVE-2026-91798 |
high | 8.8 | 0.0015 | 2026-10-29 | A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor | |
CVE-2026-91794 |
high | 7.8 | 0.0022 | 2026-10-29 | An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Edit | |
CVE-2026-91788 |
medium | 5.5 | 0.0010 | 2026-10-29 | When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the at | |
CVE-2026-88010 |
medium | 6.3 | 0.0031 | 2026-10-29 | Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.7.13, | |
CVE-2026-110674 |
medium | 6.5 | 0.0051 | 2026-10-29 | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare key | |
CVE-2026-110673 |
high | 7.5 | 0.0049 | 2026-10-29 | Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged va | |
CVE-2026-110672 |
high | 7.5 | 0.0049 | 2026-10-29 | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected | |
CVE-2026-107618 |
high | 8.1 | 0.0015 | 2026-10-29 | `POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides | |
CVE-2026-119115 |
high | 8.4 | 0.0017 | 2026-10-29 | Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kub | |
CVE-2026-118761 |
high | 7.5 | 0.0050 | 2026-10-29 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-118760 |
medium | 6.5 | 0.0035 | 2026-10-29 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-118759 |
high | 7.5 | 0.0034 | 2026-10-29 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-107049 |
high | 7.5 | 0.0031 | 2026-10-29 | An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user | |
CVE-2026-110677 |
high | 7.5 | 0.0049 | 2026-10-29 | Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplica | |
CVE-2026-110676 |
high | 7.5 | 0.0049 | 2026-10-29 | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponen | |
CVE-2026-110675 |
high | 8.1 | 0.0045 | 2026-10-29 | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare ha | |
CVE-2026-11587 |
high | 7.2 | 0.0026 | 2026-10-29 | SQL injection allowing an authenticated user with access to ACL management to read and mod | |
CVE-2026-107051 |
high | 7.5 | 0.0025 | 2026-10-29 | Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows | |
CVE-2026-107050 |
critical | 9.8 | 0.0047 | 2026-10-29 | An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading | |
CVE-2023-7357 |
high | 8.6 | 0.0038 | 2026-10-29 | A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmi | |
CVE-2026-110682 |
high | 7.5 | 0.0042 | 2026-10-29 | Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the dec | |
CVE-2026-110678 |
high | 7.5 | 0.0049 | 2026-10-29 | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering increm | |
CVE-2026-115805 |
high | 7.8 | 0.0017 | 2026-10-29 | Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may | |
CVE-2026-107055 |
high | 7.5 | 0.0026 | 2026-10-29 | Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 all | |
CVE-2026-107053 |
critical | 9.1 | 0.0036 | 2026-10-29 | Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized at | |
CVE-2026-107052 |
high | 7.5 | 0.0035 | 2026-10-29 | Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode | |
CVE-2026-91219 |
high | 8.6 | 0.0031 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-118762 |
critical | 9.3 | 0.0032 | 2026-10-29 | Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/w |