Browse All CVEs
41,130 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-62669 |
high | 7.4 | 0.0050 | 2026-10-29 | Grav Login Plugin adds login, basic ACL, and session wide messages to Grav. Prior to 3.8.1 | |
CVE-2026-20314 |
medium | 5.0 | 0.0044 | 2026-10-29 | A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unifi | |
CVE-2026-41424 |
high | 8.2 | 0.0047 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-44255 |
medium | 5.3 | 0.0062 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-44256 |
medium | 5.3 | 0.0049 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-44901 |
high | 8.4 | 0.0075 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-45798 |
high | 7.5 | 0.0092 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-48024 |
critical | 9.1 | 0.0078 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-48162 |
critical | 9.1 | 0.0065 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-49392 |
medium | 5.3 | 0.0030 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-49441 |
critical | 9.1 | 0.0077 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-71470 |
critical | 9.1 | 0.0071 | 2026-10-29 | A flaw was found in the search-v2-operator. This vulnerability allows a privileged user, s | |
CVE-2026-75141 |
high | 8.5 | 0.0020 | 2026-10-29 | FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When | |
CVE-2026-75142 |
high | 8.5 | 0.0020 | 2026-10-29 | FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavf | |
CVE-2026-75143 |
critical | 9.3 | 0.0070 | 2026-10-29 | FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader ( | |
CVE-2026-75144 |
high | 8.5 | 0.0020 | 2026-10-29 | FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dir | |
CVE-2026-75145 |
medium | 5.8 | 0.0016 | 2026-10-29 | FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 | |
CVE-2026-75146 |
high | 7.2 | 0.0026 | 2026-10-29 | FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavform | |
CVE-2026-75147 |
medium | 6.9 | 0.0012 | 2026-10-29 | FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer (lib | |
CVE-2026-17183 |
high | 7.1 | 0.0029 | 2026-10-29 | An authenticated user with permission to create or edit alert rules can bypass datasource | |
CVE-2026-18874 |
medium | 6.2 | 0.0054 | 2026-10-29 | A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inj | |
CVE-2026-19653 |
medium | 5.5 | 0.0013 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a deni | |
CVE-2026-55191 |
high | 8.7 | 0.0062 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP | |
CVE-2026-55192 |
high | 7.2 | 0.0045 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP | |
CVE-2026-55193 |
high | 8.7 | 0.0048 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP | |
CVE-2026-55194 |
high | 8.7 | 0.0062 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpc_clie | |
CVE-2026-55564 |
high | 7.1 | 0.0033 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyp | |
CVE-2026-55648 |
medium | 6.1 | 0.0043 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, freerdp_ | |
CVE-2026-61518 |
high | 8.7 | 0.0046 | 2026-10-29 | ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The pri | |
CVE-2026-63117 |
medium | 6.5 | 0.0055 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, an authe | |
CVE-2026-63633 |
high | 7.7 | 0.0062 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdp_ | |
CVE-2026-63652 |
high | 7.1 | 0.0058 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, rdpsnd_s | |
CVE-2026-66794 |
critical | 9.3 | 0.0062 | 2026-10-29 | A flaw was found in the `cluster-proxy-addon` component of Multicluster Engine for Kuberne | |
CVE-2026-19198 |
high | 8.7 | 0.0030 | 2026-10-29 | Akaunting 3.1.21 contains an authenticated improper authorization vulnerability in the com | |
CVE-2026-49870 |
medium | 5.9 | 0.0040 | 2026-10-29 | Snipe-IT is an IT asset/license management system. Prior to 8.6.1, POST /two-factor has no | |
CVE-2026-70496 |
critical | 9.9 | 0.0055 | 2026-10-29 | A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equival | |
CVE-2026-75618 |
high | 7.1 | 0.0038 | 2026-10-29 | Tapo C100/C101 V5 contains a null pointer dereference vulnerability in the RTSP service. A | |
CVE-2026-75619 |
medium | 6.9 | 0.0042 | 2026-10-29 | Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. | |
CVE-2026-16822 |
critical | 9.3 | 0.0025 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate | |
CVE-2026-16824 |
high | 7.5 | 0.0055 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16825 |
medium | 4.2 | 0.0033 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker | |
CVE-2026-16827 |
medium | 5.9 | 0.0044 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16829 |
medium | 5.3 | 0.0025 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16831 |
high | 7.5 | 0.0055 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16833 |
medium | 5.3 | 0.0040 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose ke | |
CVE-2026-16834 |
critical | 9.8 | 0.0062 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16836 |
high | 7.5 | 0.0055 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16837 |
high | 7.5 | 0.0035 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16838 |
high | 7.0 | 0.0010 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite cr | |
CVE-2026-16839 |
critical | 9.4 | 0.0052 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sens |