Browse All CVEs
43,697 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-86974 |
high | 7.5 | 0.0053 | 2026-10-29 | A type confusion issue was addressed with improved checks. This issue is fixed in Safari 2 | |
CVE-2026-86978 |
low | 3.3 | 0.0020 | 2026-10-29 | This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS | |
CVE-2026-86984 |
medium | 5.5 | 0.0018 | 2026-10-29 | A file access issue existed with certain home folder files. This was addressed with improv | |
CVE-2026-86985 |
medium | 6.5 | 0.0038 | 2026-10-29 | This issue was addressed with improved input validation. This issue is fixed in Safari 27. | |
CVE-2026-86986 |
high | 7.5 | 0.0050 | 2026-10-29 | A use-after-free issue was addressed with improved memory management. This issue is fixed | |
CVE-2026-86987 |
medium | 5.5 | 0.0015 | 2026-10-29 | An authorization issue was addressed with improved entitlement checks. This issue is fixed | |
CVE-2026-86988 |
medium | 4.3 | 0.0038 | 2026-10-29 | The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 2 | |
CVE-2026-86989 |
medium | 5.1 | 0.0012 | 2026-10-29 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-86990 |
medium | 5.1 | 0.0021 | 2026-10-29 | An access issue was addressed with improved access restrictions. This issue is fixed in iO | |
CVE-2026-86991 |
high | 7.5 | 0.0077 | 2026-10-29 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS | |
CVE-2026-86992 |
high | 7.5 | 0.0070 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 a | |
CVE-2026-116507 |
medium | 5.5 | 0.0040 | 2026-10-29 | A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this | |
CVE-2026-116508 |
critical | 10.0 | 0.0061 | 2026-10-29 | A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by | |
CVE-2026-116514 |
low | 2.1 | 0.0035 | 2026-10-29 | A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affect | |
CVE-2026-116515 |
low | 2.1 | 0.0025 | 2026-10-29 | A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vul | |
CVE-2026-116585 |
medium | 6.9 | 0.0026 | 2026-10-29 | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of | |
CVE-2026-116586 |
medium | 6.9 | 0.0029 | 2026-10-29 | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of | |
CVE-2026-116587 |
high | 7.5 | 0.0037 | 2026-10-29 | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of | |
CVE-2026-116588 |
high | 8.7 | 0.0047 | 2026-10-29 | Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, | |
CVE-2026-116589 |
high | 8.2 | 0.0033 | 2026-10-29 | Datadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST s | |
CVE-2026-116590 |
medium | 5.9 | 0.0041 | 2026-10-29 | snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by | |
CVE-2026-116591 |
high | 8.7 | 0.0033 | 2026-10-29 | compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and | |
CVE-2026-116723 |
high | 8.5 | 0.0016 | 2026-10-29 | FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::l | |
CVE-2026-116724 |
high | 8.5 | 0.0015 | 2026-10-29 | FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() | |
CVE-2026-116725 |
medium | 6.8 | 0.0014 | 2026-10-29 | gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in ma | |
CVE-2026-116726 |
medium | 4.8 | 0.0013 | 2026-10-29 | Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in | |
CVE-2026-116727 |
medium | 4.8 | 0.0013 | 2026-10-29 | gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in | |
CVE-2026-116728 |
medium | 6.8 | 0.0014 | 2026-10-29 | libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encry | |
CVE-2026-116729 |
medium | 4.8 | 0.0013 | 2026-10-29 | libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encry | |
CVE-2026-116730 |
medium | 6.8 | 0.0014 | 2026-10-29 | Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::lo | |
CVE-2026-116731 |
medium | 6.9 | 0.0014 | 2026-10-29 | Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFT | |
CVE-2026-116732 |
medium | 4.8 | 0.0013 | 2026-10-29 | libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_add | |
CVE-2026-116733 |
medium | 6.3 | 0.0042 | 2026-10-29 | flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_ | |
CVE-2026-116734 |
medium | 6.3 | 0.0038 | 2026-10-29 | flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header functi | |
CVE-2026-116735 |
medium | 6.9 | 0.0013 | 2026-10-29 | libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record | |
CVE-2026-116736 |
medium | 6.9 | 0.0013 | 2026-10-29 | Libpff through 20260926 contains a heap out-of-bounds read vulnerability in libpff_table_r | |
CVE-2026-116737 |
medium | 6.9 | 0.0013 | 2026-10-29 | libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_ | |
CVE-2026-116738 |
high | 8.7 | 0.0073 | 2026-10-29 | VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that a | |
CVE-2026-116739 |
medium | 5.3 | 0.0025 | 2026-10-29 | VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::dec | |
CVE-2026-116740 |
high | 7.1 | 0.0033 | 2026-10-29 | libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_q | |
CVE-2026-116741 |
high | 8.3 | 0.0042 | 2026-10-29 | Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits | |
CVE-2026-116742 |
medium | 4.8 | 0.0012 | 2026-10-29 | HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_ind | |
CVE-2026-116743 |
medium | 6.8 | 0.0013 | 2026-10-29 | libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_va | |
CVE-2026-116744 |
medium | 6.9 | 0.0043 | 2026-10-29 | ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_ho | |
CVE-2026-116745 |
medium | 6.9 | 0.0023 | 2026-10-29 | QloApps through 1.7.0 contains an information disclosure vulnerability in OrderConfirmatio | |
CVE-2026-116746 |
medium | 6.9 | 0.0025 | 2026-10-29 | QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotel | |
CVE-2026-116747 |
critical | 9.2 | 0.0062 | 2026-10-29 | Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unau | |
CVE-2026-116748 |
high | 8.7 | 0.0125 | 2026-10-29 | Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request | |
CVE-2026-65685 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-65686 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority |