Browse All CVEs
41,068 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-75596 |
high | 8.7 | 0.0037 | 2026-10-29 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fin | |
CVE-2026-76139 |
high | 8.0 | 0.0072 | 2026-10-29 | A flaw was found in acm-operator-bundle. The build process for this component downloads an | |
CVE-2026-76827 |
medium | 6.8 | 0.0053 | 2026-10-29 | A flaw was found in search-indexer. This vulnerability allows a registered and authenticat | |
CVE-2026-59992 |
medium | 5.4 | 0.0038 | 2026-10-29 | Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacm | |
CVE-2026-63123 |
medium | 6.5 | 0.0026 | 2026-10-29 | Tina is a headless content management system. Prior to 2.5.2, the TinaCMS CLI package's Vi | |
CVE-2026-76256 |
medium | 4.3 | 0.0030 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-76257 |
medium | 6.5 | 0.0034 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-76258 |
medium | 6.5 | 0.0034 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-76259 |
high | 7.8 | 0.0017 | 2026-10-29 | In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14 | |
CVE-2026-76261 |
medium | 6.5 | 0.0029 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-76311 |
critical | 9.4 | 0.0045 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated | |
CVE-2026-76327 |
medium | 6.4 | 0.0026 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-76347 |
medium | 5.4 | 0.0029 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-76351 |
high | 8.8 | 0.0042 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-76376 |
medium | 4.3 | 0.0019 | 2026-10-29 | In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with p | |
CVE-2026-76383 |
medium | 4.3 | 0.0021 | 2026-10-29 | In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a u | |
CVE-2026-76384 |
medium | 4.3 | 0.0019 | 2026-10-29 | In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR, a user wh | |
CVE-2026-76390 |
medium | 5.3 | 0.0039 | 2026-10-29 | In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthe | |
CVE-2026-76404 |
critical | 9.1 | 0.0075 | 2026-10-29 | In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role co | |
CVE-2026-76886 |
critical | 9.8 | 0.0038 | 2026-10-29 | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of ser | |
CVE-2026-8619 |
high | 7.1 | 0.0087 | 2026-10-29 | An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2 | |
CVE-2026-75628 |
medium | 5.7 | 0.0050 | 2026-10-29 | Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect afte | |
CVE-2026-76783 |
medium | 5.5 | 0.0041 | 2026-10-29 | A security vulnerability has been detected in DeDeCMS 53_1_UTF8. This vulnerability affect | |
CVE-2026-76800 |
low | 2.1 | 0.0035 | 2026-10-29 | A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functiona | |
CVE-2026-77014 |
medium | 5.3 | 0.0023 | 2026-10-29 | A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() c | |
CVE-2026-18917 |
high | 7.8 | 0.0018 | 2026-10-29 | A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow | |
CVE-2026-11861 |
high | 8.1 | 0.0036 | 2026-10-29 | A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and A | |
CVE-2026-13097 |
high | 8.7 | 0.0077 | 2026-10-29 | A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Ke | |
CVE-2026-73196 |
medium | 6.5 | 0.0043 | 2026-10-29 | A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerabi | |
CVE-2026-73197 |
high | 7.5 | 0.0059 | 2026-10-29 | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerabi | |
CVE-2026-73198 |
high | 7.5 | 0.0054 | 2026-10-29 | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerabilit | |
CVE-2026-73199 |
medium | 6.5 | 0.0035 | 2026-10-29 | A flaw was found in the `ipa-enrollment` SLAPI plugin. A remote authenticated client can e | |
CVE-2026-66581 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions. | |
CVE-2026-66590 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Tagembed <= 7.4 versions. | |
CVE-2026-66592 |
critical | 9.3 | 0.0040 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-74001 |
critical | 9.8 | 0.0061 | 2026-10-29 | Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versi | |
CVE-2026-74014 |
critical | 9.9 | 0.0048 | 2026-10-29 | Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions. | |
CVE-2026-77079 |
high | 7.4 | 0.0045 | 2026-10-29 | n8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role d | |
CVE-2026-77118 |
high | 8.4 | 0.0017 | 2026-10-29 | A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In Deco | |
CVE-2026-7485 |
low | 2.3 | 0.0035 | 2026-10-29 | Incorrect authorization in frozen BI aggregations in Checkmk <2.5.0p2, <2.4.0p29, <2.3.0p4 | |
CVE-2026-15706 |
critical | 9.8 | 0.0064 | 2026-10-29 | Missing authentication for critical function vulnerability in Baylan Measuring Instruments | |
CVE-2026-64960 |
high | 8.7 | 0.0063 | 2026-10-29 | ATutor Gameme module allows users to upload files of any type and extension without restri | |
CVE-2026-64961 |
medium | 6.3 | 0.0048 | 2026-10-29 | ATutor is vulnerable to authentication bypass . Although a token validation check is prese | |
CVE-2026-64962 |
medium | 5.1 | 0.0022 | 2026-10-29 | ATutor is vulnerable to Cross-Site Request Forgery (CSRF) in profile update functionality. | |
CVE-2026-64963 |
low | 2.3 | 0.0053 | 2026-10-29 | A path traversal vulnerability in ATutor allows an authenticated user to access files from | |
CVE-2026-64964 |
medium | 6.3 | 0.0037 | 2026-10-29 | ATutor generates predictable email confirmation tokens due to the use of insufficiently ra | |
CVE-2026-64965 |
medium | 5.3 | 0.0039 | 2026-10-29 | ATutor is vulnerable to Missing Authorization Check on Test and Question Import endpoints. | |
CVE-2026-64966 |
high | 8.7 | 0.0072 | 2026-10-29 | ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An | |
CVE-2026-64967 |
medium | 6.9 | 0.0049 | 2026-10-29 | A path traversal vulnerability in ATutor's error log viewer allows an attacker with admini | |
CVE-2026-64968 |
medium | 5.1 | 0.0040 | 2026-10-29 | ATutor is vulnerable to Server-Side request forgery in import functionalities. An authenti |