Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-96199 |
high | 8.8 | 0.0057 | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attac | |
CVE-2026-96198 |
high | 8.8 | 0.0057 | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attac | |
CVE-2026-93571 |
low | 2.3 | 0.0019 | 2026-10-29 | Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attac | |
CVE-2026-93570 |
high | 8.2 | 0.0028 | 2026-10-29 | Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When | |
CVE-2026-85897 |
high | 8.8 | 0.0057 | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attac | |
CVE-2026-85890 |
high | 8.8 | 0.0057 | 2026-10-29 | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute | |
CVE-2026-48200 |
medium | 5.3 | 0.0028 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document | |
CVE-2026-42694 |
medium | 4.3 | 0.0017 | 2026-10-29 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-116848 |
medium | 6.5 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-110309 |
high | 8.8 | 0.0057 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execu | |
CVE-2026-110245 |
high | 7.5 | 0.0037 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive in | |
CVE-2026-110244 |
medium | 6.5 | 0.0065 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtai | |
CVE-2026-110200 |
medium | 6.5 | 0.0023 | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtai |
CVE-2026-110196 |
high | 8.8 | 0.0046 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged | |
CVE-2026-110193 |
high | 8.8 | 0.0080 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged | |
CVE-2026-110192 |
medium | 6.5 | 0.0025 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtai | |
CVE-2026-110190 |
medium | 6.5 | 0.0042 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse direct | |
CVE-2026-110186 |
critical | 9.8 | 0.0062 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary c | |
CVE-2026-109891 |
medium | 6.4 | 0.0014 | 2026-10-29 | Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-a | |
CVE-2026-107028 |
critical | 9.1 | 0.0034 | 2026-10-29 | Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized | |
CVE-2026-107027 |
critical | 9.1 | 0.0034 | 2026-10-29 | Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized a | |
CVE-2026-107026 |
high | 7.5 | 0.0046 | 2026-10-29 | Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized at | |
CVE-2026-107025 |
high | 7.5 | 0.0031 | 2026-10-29 | Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unau | |
CVE-2026-106036 |
medium | 6.9 | 0.0017 | 2026-10-29 | Szafir accepts any client or server certificate without performing certificate and hostnam | |
CVE-2026-96203 |
high | 8.8 | 0.0057 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to eleva | |
CVE-2026-96196 |
high | 8.8 | 0.0075 | 2026-10-29 | Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthor | |
CVE-2026-96192 |
high | 8.8 | 0.0057 | 2026-10-29 | Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code o | |
CVE-2026-96187 |
high | 7.4 | 0.0050 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-93680 |
critical | 9.8 | 0.0218 | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security res |
CVE-2026-90991 |
medium | 6.5 | 0.0039 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause | |
CVE-2026-88090 |
medium | 5.4 | 0.0031 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-88078 |
medium | 4.3 | 0.0029 | 2026-10-29 | Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows | |
CVE-2026-88077 |
high | 8.8 | 0.0063 | 2026-10-29 | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized a | |
CVE-2026-85899 |
high | 8.1 | 0.0064 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate | |
CVE-2026-85330 |
medium | 4.3 | 0.0035 | 2026-10-29 | Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to b | |
CVE-2026-77819 |
medium | 6.5 | 0.0037 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overw | |
CVE-2026-77817 |
medium | 6.5 | 0.0034 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtai | |
CVE-2026-66912 |
medium | 5.3 | 0.0047 | 2026-10-29 | Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during | |
CVE-2026-66911 |
medium | 5.3 | 0.0054 | 2026-10-29 | Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME he | |
CVE-2026-62131 |
critical | 9.8 | 0.0031 | 2026-10-29 | Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions. | |
CVE-2026-62018 |
critical | 9.8 | 0.0045 | 2026-10-29 | Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions. | |
CVE-2026-62017 |
critical | 9.8 | 0.0042 | 2026-10-29 | Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions. | |
CVE-2026-62016 |
critical | 9.8 | 0.0040 | 2026-10-29 | Unauthenticated PHP Object Injection in Gamic <= 1.19 versions. | |
CVE-2026-62015 |
critical | 9.8 | 0.0040 | 2026-10-29 | Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions. | |
CVE-2026-62014 |
critical | 9.8 | 0.0043 | 2026-10-29 | Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions. | |
CVE-2026-62013 |
critical | 9.8 | 0.0045 | 2026-10-29 | Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions. | |
CVE-2026-62012 |
critical | 9.8 | 0.0042 | 2026-10-29 | Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions. | |
CVE-2026-62011 |
critical | 9.8 | 0.0040 | 2026-10-29 | Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions. | |
CVE-2026-62010 |
critical | 9.8 | 0.0040 | 2026-10-29 | Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions. | |
CVE-2026-62009 |
critical | 9.8 | 0.0043 | 2026-10-29 | Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions. |