Browse All CVEs
37,945 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-67356 |
high | 8.7 | 0.0044 | 2026-10-29 | ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger context | |
CVE-2026-67357 |
high | 7.7 | 0.0042 | 2026-10-29 | ArcadeDB versions before 26.7.3 contain an information disclosure vulnerability in the MCP | |
CVE-2026-68578 |
high | 7.7 | 0.0036 | 2026-10-29 | ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP t | |
CVE-2026-68581 |
high | 8.6 | 0.0046 | 2026-10-29 | Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token man | |
CVE-2026-68582 |
critical | 9.3 | 0.0033 | 2026-10-29 | Vikunja versions >= 0.24.0 and <= 2.3.0 contain a broken object level authorization (BOLA) | |
CVE-2026-68583 |
medium | 5.1 | 0.0024 | 2026-10-29 | luci-app-adblock-fast before 1.2.4-4 contains a stored cross-site scripting vulnerability | |
CVE-2026-10774 |
medium | 6.5 | 0.0029 | 2026-10-29 | Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subne | |
CVE-2026-65321 |
critical | 9.3 | 0.0077 | 2026-10-29 | PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticate | |
CVE-2026-9856 |
high | 7.1 | 0.0046 | 2026-10-29 | A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to pe | |
CVE-2026-10848 |
high | 8.6 | 0.0038 | 2026-10-29 | The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg | |
CVE-2026-18577 |
high | 8.2 | 0.1462 | 2026-10-29 | KEV | N-able N-central contains an authentication bypass using an alternate path or channel allo |
CVE-2026-3245 |
high | 7.7 | 0.0071 | 2026-10-29 | A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead t | |
CVE-2026-18581 |
low | 1.9 | 0.0016 | 2026-10-29 | A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is so | |
CVE-2026-59644 |
high | 8.7 | 0.0049 | 2026-10-29 | In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generatio | |
CVE-2026-59652 |
medium | 6.9 | 0.0029 | 2026-10-29 | In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHel | |
CVE-2026-65875 |
medium | 5.1 | 0.0026 | 2026-10-29 | BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. | |
CVE-2026-18582 |
medium | 5.5 | 0.0086 | 2026-10-29 | A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnera | |
CVE-2026-20464 |
medium | 6.5 | 0.0050 | 2026-10-29 | In hevc decoder, there is a possible out of bounds write due to an integer overflow. This | |
CVE-2026-20465 |
high | 8.1 | 0.0031 | 2026-10-29 | In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. | |
CVE-2026-20466 |
medium | 6.1 | 0.0017 | 2026-10-29 | In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. Th | |
CVE-2026-20467 |
medium | 6.0 | 0.0017 | 2026-10-29 | In apusys, there is a possible escalation of privilege due to a missing bounds check. This | |
CVE-2026-20468 |
medium | 6.0 | 0.0016 | 2026-10-29 | In apusys, there is a possible escalation of privilege due to a confused deputy. This coul | |
CVE-2026-20469 |
medium | 5.8 | 0.0015 | 2026-10-29 | In trusted_mem, there is a possible escalation of privilege due to improper input validati | |
CVE-2026-20470 |
medium | 6.2 | 0.0017 | 2026-10-29 | In Telephony, there is a possible information disclosure due to a missing permission check | |
CVE-2026-20471 |
medium | 4.6 | 0.0023 | 2026-10-29 | In DA, there is a possible out of bounds write due to a missing bounds check. This could l | |
CVE-2026-20472 |
medium | 4.4 | 0.0014 | 2026-10-29 | In TFA, there is a possible out of bounds write due to a missing bounds check. This could | |
CVE-2026-20473 |
medium | 6.0 | 0.0017 | 2026-10-29 | In display, there is a possible memory corruption due to use after free. This could lead t | |
CVE-2026-20474 |
medium | 6.0 | 0.0013 | 2026-10-29 | In display, there is a possible escalation of privilege due to a race condition. This coul | |
CVE-2026-20475 |
medium | 6.0 | 0.0017 | 2026-10-29 | In display, there is a possible out of bounds write due to a missing bounds check. This co | |
CVE-2026-20476 |
medium | 5.5 | 0.0015 | 2026-10-29 | In ccci, there is a possible out of bounds read due to a missing bounds check. This could | |
CVE-2026-20477 |
medium | 6.0 | 0.0017 | 2026-10-29 | In display, there is a possible out of bounds write due to a missing bounds check. This co | |
CVE-2026-20478 |
medium | 5.5 | 0.0014 | 2026-10-29 | In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This | |
CVE-2026-20479 |
high | 7.5 | 0.0071 | 2026-10-29 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could | |
CVE-2026-20480 |
medium | 5.5 | 0.0014 | 2026-10-29 | In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This | |
CVE-2026-20481 |
medium | 6.0 | 0.0017 | 2026-10-29 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This | |
CVE-2026-20482 |
medium | 6.5 | 0.0030 | 2026-10-29 | In wlan STA FW, there is a possible system becoming unresponsive due to logging. This coul | |
CVE-2026-20483 |
high | 7.7 | 0.0017 | 2026-10-29 | In Telephony, there is a possible escalation of privilege due to a missing permission chec | |
CVE-2026-20484 |
medium | 4.4 | 0.0016 | 2026-10-29 | In TFA, there is a possible information disclosure due to a missing permission check. This | |
CVE-2026-20485 |
medium | 6.0 | 0.0016 | 2026-10-29 | In HFRP, there is a possible out of bounds write due to a missing bounds check. This could | |
CVE-2026-20486 |
medium | 6.7 | 0.0017 | 2026-10-29 | In imgsensor, there is a possible application crash due to incorrect error handling. This | |
CVE-2026-20488 |
medium | 4.4 | 0.0016 | 2026-10-29 | In display, there is a possible information disclosure due to a missing bounds check. This | |
CVE-2026-20489 |
medium | 4.4 | 0.0016 | 2026-10-29 | In display, there is a possible information disclosure due to an integer overflow. This co | |
CVE-2026-20490 |
medium | 4.4 | 0.0014 | 2026-10-29 | In ccci, there is a possible out of bounds read due to a missing bounds check. This could | |
CVE-2026-20491 |
medium | 5.5 | 0.0015 | 2026-10-29 | In med, there is a possible out of bounds write due to an incorrect bounds check. This cou | |
CVE-2026-20492 |
medium | 5.5 | 0.0011 | 2026-10-29 | In Audio HAL, there is a possible system becoming unresponsive due to a race condition. Th | |
CVE-2026-20493 |
medium | 4.4 | 0.0014 | 2026-10-29 | In wifi, there is a possible out of bounds write due to a missing bounds check. This could | |
CVE-2026-20494 |
medium | 5.5 | 0.0015 | 2026-10-29 | In wifi, there is a possible out of bounds read due to a missing bounds check. This could | |
CVE-2026-20495 |
high | 7.8 | 0.0015 | 2026-10-29 | In Bluetooth driver, there is a possible permission bypass due to a missing permission che | |
CVE-2026-20496 |
medium | 4.4 | 0.0015 | 2026-10-29 | In geniezone, there is a possible out of bounds read due to a missing bounds check. This c | |
CVE-2026-20497 |
medium | 6.0 | 0.0017 | 2026-10-29 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This |