Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-93903 |
critical | 9.4 | 0.0035 | 2026-10-29 | 1 PoC | LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validati |
CVE-2026-118084 |
medium | 6.5 | 0.0033 | 2026-10-29 | Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions. | |
CVE-2026-118083 |
high | 7.5 | 0.0030 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions. | |
CVE-2026-107034 |
critical | 9.1 | 0.0037 | 2026-10-29 | Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized att | |
CVE-2026-107033 |
medium | 6.5 | 0.0022 | 2026-10-29 | Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (vers | |
CVE-2026-107032 |
critical | 9.1 | 0.0050 | 2026-10-29 | Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unautho | |
CVE-2026-112256 |
critical | 9.2 | 0.0024 | 2026-10-29 | Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanc | |
CVE-2026-112255 |
low | 2.9 | 0.0047 | 2026-10-29 | Initialization of a resource with an insecure default vulnerability in OpenText Advanced A | |
CVE-2026-111730 |
high | 7.2 | 0.0019 | 2026-10-29 | P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block | |
CVE-2026-107035 |
medium | 6.5 | 0.0027 | 2026-10-29 | Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdow | |
CVE-2026-84294 |
high | 7.7 | 0.0035 | 2026-10-29 | Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_F | |
CVE-2026-115795 |
medium | 5.3 | 0.0016 | 2026-10-29 | P-Net before 1.0.3 does not check that a complete block header is present in the received | |
CVE-2026-115794 |
low | 2.3 | 0.0018 | 2026-10-29 | P-Net before 1.0.3 passes the application alarm callback a data length derived from the va | |
CVE-2026-115793 |
high | 8.7 | 0.0040 | 2026-10-29 | P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that name | |
CVE-2026-112200 |
high | 8.7 | 0.0041 | 2026-10-29 | P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session | |
CVE-2026-111736 |
high | 8.7 | 0.0040 | 2026-10-29 | P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling a | |
CVE-2026-111735 |
high | 7.1 | 0.0016 | 2026-10-29 | P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a r | |
CVE-2026-111734 |
high | 7.1 | 0.0016 | 2026-10-29 | P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_rec | |
CVE-2026-111733 |
high | 8.7 | 0.0040 | 2026-10-29 | P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request w | |
CVE-2026-111732 |
critical | 9.3 | 0.0040 | 2026-10-29 | P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data le | |
CVE-2026-111731 |
high | 8.7 | 0.0040 | 2026-10-29 | P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortData | |
CVE-2026-107039 |
high | 7.5 | 0.0049 | 2026-10-29 | Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-roo | |
CVE-2026-107038 |
critical | 9.1 | 0.0037 | 2026-10-29 | Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized | |
CVE-2026-107037 |
high | 7.5 | 0.0043 | 2026-10-29 | Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 7 | |
CVE-2026-107036 |
medium | 5.1 | 0.0013 | 2026-10-29 | Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthoriz | |
CVE-2026-90864 |
critical | 9.1 | 0.0048 | 2026-10-29 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0 | |
CVE-2026-90863 |
critical | 9.1 | 0.0066 | 2026-10-29 | Missing authorization in the administrative interface of Progress Software WS_FTP Server v | |
CVE-2026-90862 |
medium | 4.3 | 0.0022 | 2026-10-29 | Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server vers | |
CVE-2026-90861 |
medium | 6.6 | 0.0031 | 2026-10-29 | Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may exp | |
CVE-2026-84296 |
medium | 6.8 | 0.0034 | 2026-10-29 | Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_ | |
CVE-2026-84295 |
critical | 10.0 | 0.0055 | 2026-10-29 | Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and | |
CVE-2026-107041 |
high | 7.5 | 0.0040 | 2026-10-29 | Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCo | |
CVE-2026-107040 |
critical | 9.1 | 0.0034 | 2026-10-29 | Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers t | |
CVE-2026-90871 |
medium | 5.3 | 0.0027 | 2026-10-29 | Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Se | |
CVE-2026-90870 |
medium | 5.3 | 0.0027 | 2026-10-29 | A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progres | |
CVE-2026-90869 |
high | 7.5 | 0.0036 | 2026-10-29 | A remote attacker who knows a valid account's enrolled SSH public key can terminate the sh | |
CVE-2026-90868 |
critical | 9.9 | 0.0149 | 2026-10-29 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to | |
CVE-2026-90867 |
high | 8.1 | 0.0040 | 2026-10-29 | Improper access control in the Web Admin console of Progress Software WS_FTP Server versio | |
CVE-2026-90866 |
critical | 9.1 | 0.0073 | 2026-10-29 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0 | |
CVE-2026-90865 |
critical | 9.0 | 0.0114 | 2026-10-29 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to | |
CVE-2026-86949 |
high | 8.8 | 0.0016 | 2026-10-29 | This issue was addressed by enforcing library validation on the affected binaries. This is | |
CVE-2026-86948 |
high | 8.8 | 0.0014 | 2026-10-29 | This issue was addressed by enforcing library validation on the affected binaries. This is | |
CVE-2026-86875 |
medium | 4.3 | 0.0028 | 2026-10-29 | An input validation issue was addressed with improved input validation. This issue is fixe | |
CVE-2026-86874 |
low | 3.3 | 0.0015 | 2026-10-29 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in | |
CVE-2026-73070 |
medium | 6.8 | 0.0019 | 2026-10-29 | Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server back | |
CVE-2026-64024 |
critical | 9.4 | 0.0031 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CP | |
CVE-2026-5201 |
high | 7.5 | 0.0115 | 2026-10-29 | 1 PoC | A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability |
CVE-2023-26142 |
medium | 6.1 | 0.0056 | 2026-10-29 | All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted | |
CVE-2026-100132 |
medium | 4.3 | 0.0044 | 2026-10-29 | Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to dis | |
CVE-2025-47761 |
high | 7.1 | 0.0017 | 2026-10-29 | An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in |