Browse All CVEs
36,044 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-12702 |
medium | 5.1 | 0.0033 | 2026-10-29 | In affected versions of Octopus Deploy Insufficient checks on the project trigger actions | |
CVE-2026-15704 |
critical | 9.8 | 0.0046 | 2026-10-29 | In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled deployment | |
CVE-2026-24727 |
critical | 9.3 | 0.0065 | 2026-10-29 | An unrestricted upload of file with dangerous type vulnerability in the e-paper draft uplo | |
CVE-2026-49743 |
high | 7.8 | 0.0016 | 2026-10-29 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-49744 |
high | 7.8 | 0.0016 | 2026-10-29 | Kernel software installed and running inside a Guest VM may post improper commands to the | |
CVE-2026-49745 |
high | 7.8 | 0.0016 | 2026-10-29 | Kernel software installed and running inside a Guest VM may post improper commands to the | |
CVE-2026-56391 |
medium | 4.6 | 0.0013 | 2026-10-29 | GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of mul | |
CVE-2026-56392 |
low | 1.8 | 0.0019 | 2026-10-29 | GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer ove | |
CVE-2026-63317 |
medium | 5.6 | 0.0085 | 2026-10-29 | Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apac | |
CVE-2026-16634 |
critical | 9.8 | 0.0082 | 2026-10-29 | TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tom | |
CVE-2026-15810 |
high | 8.7 | 0.0045 | 2026-10-29 | A Cross-Site Scripting (XSS) vulnerability in Google Cloud Looker versions prior to 25.6.1 | |
CVE-2026-45811 |
high | 7.5 | 0.0048 | 2026-10-29 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Ap | |
CVE-2026-45812 |
medium | 6.5 | 0.0069 | 2026-10-29 | Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy | |
CVE-2026-45813 |
high | 8.8 | 0.0053 | 2026-10-29 | Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE | |
CVE-2026-45815 |
high | 7.5 | 0.0103 | 2026-10-29 | Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple | |
CVE-2026-45816 |
high | 7.5 | 0.0103 | 2026-10-29 | NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. | |
CVE-2026-46452 |
medium | 5.3 | 0.0091 | 2026-10-29 | Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly coul | |
CVE-2026-66008 |
medium | 6.3 | 0.0056 | 2026-10-29 | Parse Server versions >= 9.0.0 before 9.10.0-alpha.6 and >= 8.2.2 before 8.6.87 disclose P | |
CVE-2026-66009 |
medium | 6.3 | 0.0044 | 2026-10-29 | Parse Server versions >= 9.0.0 before 9.10.0-alpha.5 and >= 8.2.2 before 8.6.86 return Gra | |
CVE-2026-66010 |
medium | 5.1 | 0.0022 | 2026-10-29 | DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements al | |
CVE-2026-66142 |
high | 7.5 | 0.0074 | 2026-10-29 | Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack poli | |
CVE-2026-66143 |
high | 7.5 | 0.0085 | 2026-10-29 | It is possible to bypass the maximum number of normalized policy alternatives that was int | |
CVE-2026-66144 |
high | 7.5 | 0.0074 | 2026-10-29 | Although remote policy references are not retrieved during policy normalization, if they a | |
CVE-2026-7484 |
medium | 5.3 | 0.0033 | 2026-10-29 | External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. | |
CVE-2026-9765 |
high | 7.1 | 0.0040 | 2026-10-29 | Note: The CVE and blog post don't exist because we determined this is actually a cloud-onl | |
CVE-2026-16798 |
medium | 6.5 | 0.0038 | 2026-10-29 | Insertion of sensitive information into sent data in the automation jobs API in Devolution | |
CVE-2026-16799 |
medium | 5.0 | 0.0025 | 2026-10-29 | Improper access control in the automation tests and workflows features in Devolutions Powe | |
CVE-2026-16800 |
high | 8.8 | 0.0053 | 2026-10-29 | Improper control of generation of code ('Code Injection') in the schedule feature in Devol | |
CVE-2026-16801 |
high | 8.8 | 0.0053 | 2026-10-29 | Improper control of generation of code ('Code Injection') in the variables feature in Devo | |
CVE-2026-16802 |
medium | 6.5 | 0.0010 | 2026-10-29 | Cleartext storage of sensitive information in the variables feature in Devolutions PowerSh | |
CVE-2026-49326 |
medium | 6.5 | 0.0049 | 2026-10-29 | Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A | |
CVE-2026-55729 |
high | 7.7 | 0.0054 | 2026-10-29 | Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LW | |
CVE-2026-55730 |
high | 8.7 | 0.0061 | 2026-10-29 | Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all | |
CVE-2026-56163 |
critical | 10.0 | 0.0090 | 2026-10-29 | Missing authentication for critical function in Microsoft Azure Kubernetes Service allows | |
CVE-2026-57106 |
critical | 10.0 | 0.0090 | 2026-10-29 | Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elev | |
CVE-2026-58586 |
critical | 9.8 | 0.0065 | 2026-10-29 | Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp. Image: | |
CVE-2026-58630 |
critical | 10.0 | 0.0086 | 2026-10-29 | Improper access control in Azure App Service allows an unauthorized attacker to elevate pr | |
CVE-2026-66004 |
medium | 6.0 | 0.0030 | 2026-10-29 | BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_p | |
CVE-2026-66005 |
medium | 5.3 | 0.0033 | 2026-10-29 | Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability | |
CVE-2026-66006 |
medium | 6.9 | 0.0056 | 2026-10-29 | lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerab | |
CVE-2026-66007 |
medium | 6.9 | 0.0055 | 2026-10-29 | Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability i | |
CVE-2026-7007 |
medium | 4.6 | 0.0024 | 2026-10-29 | The Zephyr ext2 file system validates the on-disk superblock in ext2_verify_disk_superbloc | |
CVE-2026-8308 |
medium | 6.1 | 0.0025 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-64236 |
medium | 5.5 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix div | |
CVE-2026-64237 |
high | 7.1 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - val | |
CVE-2026-64239 |
high | 7.8 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-scheme | |
CVE-2026-66027 |
high | 8.7 | 0.0046 | 2026-10-29 | Suna before 0.9.102 contains a broken access control vulnerability in the message queue AP | |
CVE-2026-65623 |
high | 8.7 | 0.0048 | 2026-10-29 | Inefficient Algorithmic Complexity vulnerability in mtrudel bandit allows unauthenticated | |
CVE-2026-65707 |
high | 8.5 | 0.0046 | 2026-10-29 | Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows a | |
CVE-2026-65708 |
high | 8.6 | 0.0039 | 2026-10-29 | sysPass through version 3.2.11 contains an insecure direct object reference vulnerability |