Browse All CVEs
3,590 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-16369 |
critical | 9.8 | 0.0064 | 2026-10-29 | Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in | |
CVE-2026-16370 |
critical | 9.1 | 0.0043 | 2026-10-29 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefo | |
CVE-2026-16375 |
critical | 9.8 | 0.0029 | 2026-10-29 | Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Fi | |
CVE-2026-16377 |
critical | 9.8 | 0.0057 | 2026-10-29 | Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16380 |
critical | 9.1 | 0.0043 | 2026-10-29 | Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16381 |
critical | 9.1 | 0.0023 | 2026-10-29 | Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed i | |
CVE-2026-16382 |
critical | 9.8 | 0.0056 | 2026-10-29 | Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in F | |
CVE-2026-16383 |
critical | 9.8 | 0.0057 | 2026-10-29 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefo | |
CVE-2026-16387 |
critical | 9.8 | 0.0028 | 2026-10-29 | Site isolation issue in the Networking component. This vulnerability was fixed in Firefox | |
CVE-2026-16388 |
critical | 9.8 | 0.0055 | 2026-10-29 | Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 1 | |
CVE-2026-16389 |
critical | 9.8 | 0.0064 | 2026-10-29 | Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vu | |
CVE-2026-16390 |
critical | 9.1 | 0.0044 | 2026-10-29 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Fi | |
CVE-2026-16392 |
critical | 9.1 | 0.0053 | 2026-10-29 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed i | |
CVE-2026-16393 |
critical | 9.1 | 0.0054 | 2026-10-29 | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fi | |
CVE-2026-16394 |
critical | 9.1 | 0.0043 | 2026-10-29 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox | |
CVE-2026-16395 |
critical | 9.8 | 0.0062 | 2026-10-29 | Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16402 |
critical | 9.8 | 0.0062 | 2026-10-29 | Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Fire | |
CVE-2026-16406 |
critical | 9.1 | 0.0043 | 2026-10-29 | Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16407 |
critical | 9.8 | 0.0051 | 2026-10-29 | Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in F | |
CVE-2026-16408 |
critical | 9.8 | 0.0062 | 2026-10-29 | Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in F | |
CVE-2026-16410 |
critical | 9.8 | 0.0055 | 2026-10-29 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed i | |
CVE-2026-65048 |
critical | 9.3 | 0.0054 | 2026-10-29 | Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticate | |
CVE-2026-28302 |
critical | 9.1 | 0.0079 | 2026-10-29 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability | |
CVE-2026-28304 |
critical | 9.1 | 0.0079 | 2026-10-29 | SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploite | |
CVE-2026-28305 |
critical | 9.1 | 0.0079 | 2026-10-29 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability | |
CVE-2026-28306 |
critical | 9.1 | 0.0050 | 2026-10-29 | SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain | |
CVE-2026-28307 |
critical | 9.1 | 0.0050 | 2026-10-29 | SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain | |
CVE-2026-28308 |
critical | 9.1 | 0.0079 | 2026-10-29 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability | |
CVE-2026-28309 |
critical | 9.1 | 0.0050 | 2026-10-29 | SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domai | |
CVE-2026-28310 |
critical | 9.1 | 0.0050 | 2026-10-29 | SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain | |
CVE-2026-28312 |
critical | 9.1 | 0.0058 | 2026-10-29 | SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate | |
CVE-2026-28313 |
critical | 9.1 | 0.0050 | 2026-10-29 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability | |
CVE-2026-28314 |
critical | 9.1 | 0.0062 | 2026-10-29 | SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that le | |
CVE-2026-28316 |
critical | 9.1 | 0.0213 | 2026-10-29 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability | |
CVE-2026-28317 |
critical | 9.1 | 0.0050 | 2026-10-29 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability | |
CVE-2026-28321 |
critical | 9.1 | 0.0058 | 2026-10-29 | SolarWinds Serv-U is affected by a broken access control vulnerability that could allow ar | |
CVE-2026-47391 |
critical | 9.8 | 0.0150 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party | |
CVE-2026-47393 |
critical | 9.8 | 0.0058 | 2026-10-29 | PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents th | |
CVE-2026-47396 |
critical | 9.8 | 0.0043 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's call server | |
CVE-2026-64824 |
critical | 9.3 | 0.0071 | 2026-10-29 | Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup- | |
CVE-2026-64825 |
critical | 9.0 | 0.0058 | 2026-10-29 | Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows un | |
CVE-2026-47407 |
critical | 9.4 | 0.0030 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior | |
CVE-2026-47410 |
critical | 9.8 | 0.0045 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-47413 |
critical | 9.6 | 0.0026 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-47416 |
critical | 9.6 | 0.0026 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-59139 |
critical | 9.1 | 0.0054 | 2026-10-29 | Data::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unva | |
CVE-2026-59140 |
critical | 9.1 | 0.0054 | 2026-10-29 | Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unva | |
CVE-2026-59141 |
critical | 9.1 | 0.0054 | 2026-10-29 | Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unva | |
CVE-2026-59142 |
critical | 9.1 | 0.0054 | 2026-10-29 | Data::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read via an unv | |
CVE-2026-64877 |
critical | 9.4 | 0.0032 | 2026-10-29 | An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API |