Browse All CVEs
3,593 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-53412 |
critical | 9.8 | 0.0053 | 2026-10-29 | Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, | |
CVE-2026-57075 |
critical | 9.1 | 0.0063 | 2026-10-29 | YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char loo | |
CVE-2026-44181 |
critical | 10.0 | 0.0077 | 2026-10-29 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clu | |
CVE-2026-44182 |
critical | 10.0 | 0.0063 | 2026-10-29 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clu | |
CVE-2026-62232 |
critical | 9.1 | 0.0035 | 2026-10-29 | Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login p | |
CVE-2026-62241 |
critical | 9.3 | 0.0067 | 2026-10-29 | clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret (' | |
CVE-2026-15982 |
critical | 9.8 | 0.0053 | 2026-10-29 | The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugi | |
CVE-2026-60024 |
critical | 9.8 | 0.0054 | 2026-10-29 | Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8. | |
CVE-2026-12692 |
critical | 9.8 | 0.0064 | 2026-10-29 | Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platform allows | |
CVE-2026-12693 |
critical | 9.4 | 0.0046 | 2026-10-29 | Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise | |
CVE-2026-12694 |
critical | 9.1 | 0.0044 | 2026-10-29 | Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Acce | |
CVE-2026-8297 |
critical | 9.8 | 0.0047 | 2026-10-29 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulne | |
CVE-2026-9586 |
critical | 9.3 | 0.1898 | 2026-10-29 | KEV | Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated r |
CVE-2026-9198 |
critical | 9.8 | 0.2866 | 2026-10-29 | KEV | Langflow contains a code injection vulnerability that allows unauthenticated attackers to |
CVE-2026-9202 |
critical | 9.8 | 0.0050 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited | |
CVE-2026-9103 |
critical | 9.8 | 0.0321 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized a | |
CVE-2026-9135 |
critical | 9.9 | 0.0084 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918 | |
CVE-2026-13448 |
critical | 9.8 | 0.0067 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code | |
CVE-2026-13473 |
critical | 9.8 | 0.0067 | 2026-10-29 | IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 | |
CVE-2026-15091 |
critical | 9.3 | 0.0057 | 2026-10-29 | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute ar | |
CVE-2026-36669 |
critical | 9.8 | 0.0066 | 2026-10-29 | An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Of | |
CVE-2026-46420 |
critical | 9.8 | 0.0201 | 2026-10-29 | setup-php is a GitHub action to set up PHP with extensions, php.ini configuration, coverag | |
CVE-2026-52199 |
critical | 9.1 | 0.0066 | 2026-10-29 | An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execut | |
CVE-2026-8476 |
critical | 9.9 | 0.0097 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerabili | |
CVE-2026-8481 |
critical | 9.9 | 0.0088 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerabili | |
CVE-2026-8505 |
critical | 9.8 | 0.0087 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentica | |
CVE-2026-8635 |
critical | 9.9 | 0.0059 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to | |
CVE-2026-8859 |
critical | 9.9 | 0.0056 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary | |
CVE-2026-13446 |
critical | 9.8 | 0.0038 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password | |
CVE-2026-54159 |
critical | 10.0 | 0.0075 | 2026-10-29 | PrestaShop ps_facetedsearch is a module that adds layered navigation filters. From 3.0.0 u | |
CVE-2026-54466 |
critical | 9.2 | 0.0038 | 2026-10-29 | websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the f | |
CVE-2026-55518 |
critical | 9.6 | 0.0041 | 2026-10-29 | Avo is a framework to create admin panels for Ruby on Rails apps. Prior to 3.32.1 and 4.0. | |
CVE-2026-47865 |
critical | 9.8 | 0.0061 | 2026-10-29 | VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user | |
CVE-2024-58366 |
critical | 9.0 | 0.0057 | 2026-10-29 | SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::t | |
CVE-2026-63808 |
critical | 9.8 | 0.0053 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential | |
CVE-2026-63830 |
critical | 9.4 | 0.0044 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve | |
CVE-2026-63886 |
critical | 9.8 | 0.0071 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: | |
CVE-2026-63887 |
critical | 9.8 | 0.0078 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: | |
CVE-2026-63888 |
critical | 9.8 | 0.0078 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: | |
CVE-2026-63922 |
critical | 9.8 | 0.0071 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refres | |
CVE-2026-63924 |
critical | 9.8 | 0.0071 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refres | |
CVE-2026-63938 |
critical | 9.3 | 0.0020 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC r | |
CVE-2026-63939 |
critical | 9.3 | 0.0020 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the | |
CVE-2026-63940 |
critical | 9.3 | 0.0019 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port | |
CVE-2026-44359 |
critical | 10.0 | 0.0180 | 2026-10-29 | Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, th | |
CVE-2026-16235 |
critical | 9.8 | 0.0055 | 2026-10-29 | Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. | |
CVE-2026-64622 |
critical | 9.3 | 0.0052 | 2026-10-29 | Network-AI (npm: network-ai) versions 5.12.2 through 5.13.3 fail to apply the configured a | |
CVE-2026-57309 |
critical | 9.3 | 0.0053 | 2026-10-29 | A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthentic | |
CVE-2026-53405 |
critical | 9.8 | 0.0075 | 2026-10-29 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administra | |
CVE-2026-53421 |
critical | 9.8 | 0.0114 | 2026-10-29 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administ |