Browse All CVEs
41,854 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-114406 |
medium | 6.8 | 0.0031 | 2026-10-29 | The system certificate authority (CA) store in Red Hat products, distributed via ca-certif | |
CVE-2026-29001 |
high | 8.6 | 0.0079 | 2026-10-29 | TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authen | |
CVE-2026-82987 |
high | 7.5 | 0.0058 | 2026-10-29 | There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewB | |
CVE-2026-96636 |
medium | 6.5 | 0.0034 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile. | |
CVE-2026-96637 |
high | 7.1 | 0.0037 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/Spi | |
CVE-2026-96638 |
medium | 6.5 | 0.0034 | 2026-10-29 | Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src | |
CVE-2026-96639 |
critical | 9.8 | 0.0066 | 2026-10-29 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can reta | |
CVE-2026-96640 |
high | 8.2 | 0.0060 | 2026-10-29 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree | |
CVE-2026-96641 |
medium | 6.5 | 0.0034 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in sr | |
CVE-2026-96642 |
high | 7.1 | 0.0034 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarI | |
CVE-2026-96643 |
high | 7.1 | 0.0037 | 2026-10-29 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image | |
CVE-2026-96644 |
high | 7.1 | 0.0038 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py | |
CVE-2026-96778 |
high | 7.7 | 0.0045 | 2026-10-29 | Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/li | |
CVE-2026-112921 |
high | 7.3 | 0.0036 | 2026-10-29 | Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter rob | |
CVE-2026-114381 |
low | 2.1 | 0.0032 | 2026-10-29 | A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affect | |
CVE-2026-114382 |
critical | 10.0 | 0.0067 | 2026-10-29 | A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the functi | |
CVE-2026-114383 |
critical | 10.0 | 0.0065 | 2026-10-29 | A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function se | |
CVE-2026-114384 |
low | 2.1 | 0.0032 | 2026-10-29 | A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0 | |
CVE-2026-114501 |
medium | 6.3 | 0.0037 | 2026-10-29 | Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an | |
CVE-2026-114508 |
medium | 6.5 | 0.0041 | 2026-10-29 | Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted re | |
CVE-2026-114509 |
critical | 9.2 | 0.0184 | 2026-10-29 | 6 PoC | Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configure |
CVE-2026-91403 |
critical | 9.1 | 0.0037 | 2026-10-29 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edi | |
CVE-2026-94140 |
critical | 9.1 | 0.0043 | 2026-10-29 | Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync trans | |
CVE-2026-94423 |
critical | 9.1 | 0.0044 | 2026-10-29 | Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because co | |
CVE-2026-100420 |
medium | 6.8 | 0.0015 | 2026-10-29 | A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 a | |
CVE-2026-103090 |
high | 8.8 | 0.0050 | 2026-10-29 | Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Creden | |
CVE-2026-114439 |
medium | 6.9 | 0.0054 | 2026-10-29 | A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this iss | |
CVE-2026-114440 |
medium | 6.9 | 0.0034 | 2026-10-29 | A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unkn | |
CVE-2026-114441 |
medium | 5.5 | 0.0042 | 2026-10-29 | A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects s | |
CVE-2026-76287 |
medium | 5.4 | 0.0021 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data | |
CVE-2026-76288 |
high | 7.5 | 0.0047 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticate | |
CVE-2026-76289 |
medium | 6.5 | 0.0037 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does n | |
CVE-2026-76290 |
high | 7.5 | 0.0050 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user c | |
CVE-2026-76291 |
high | 8.8 | 0.0039 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds | |
CVE-2026-76292 |
medium | 6.5 | 0.0034 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure | |
CVE-2026-76293 |
high | 7.2 | 0.0047 | 2026-10-29 | In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds | |
CVE-2026-76294 |
medium | 4.3 | 0.0027 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does n | |
CVE-2026-76295 |
medium | 4.3 | 0.0028 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure | |
CVE-2026-76296 |
medium | 4.3 | 0.0021 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does n | |
CVE-2026-76297 |
medium | 5.4 | 0.0011 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticate | |
CVE-2026-76298 |
high | 8.8 | 0.0035 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin | |
CVE-2026-76299 |
critical | 9.9 | 0.0033 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has | |
CVE-2026-76300 |
high | 8.8 | 0.0035 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has | |
CVE-2026-76301 |
critical | 9.8 | 0.0038 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has | |
CVE-2026-76302 |
critical | 9.9 | 0.0040 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has | |
CVE-2026-76303 |
medium | 4.8 | 0.0018 | 2026-10-29 | In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capabi | |
CVE-2026-76304 |
medium | 4.3 | 0.0016 | 2026-10-29 | In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with p | |
CVE-2026-76305 |
medium | 6.5 | 0.0027 | 2026-10-29 | In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with p | |
CVE-2026-76306 |
high | 7.5 | 0.0022 | 2026-10-29 | In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query f | |
CVE-2026-76307 |
high | 7.2 | 0.0040 | 2026-10-29 | In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles vie |