Browse All CVEs
36,014 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-64308 |
medium | 5.5 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not | |
CVE-2026-64309 |
medium | 5.5 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not | |
CVE-2026-64310 |
medium | 5.5 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not | |
CVE-2026-64311 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Re | |
CVE-2026-64312 |
high | 7.5 | 0.0050 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - rest | |
CVE-2026-64313 |
high | 8.8 | 0.0036 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix car | |
CVE-2026-64314 |
medium | 5.5 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1 | |
CVE-2026-64315 |
high | 7.0 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use pr | |
CVE-2026-64316 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use pr | |
CVE-2026-64438 |
high | 8.8 | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2 | |
CVE-2026-64439 |
critical | 9.8 | 0.0043 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter | |
CVE-2026-64529 |
high | 7.8 | 0.0018 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove | |
CVE-2026-66012 |
critical | 10.0 | 0.0076 | 2026-10-29 | SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kerne | |
CVE-2026-10681 |
medium | 6.5 | 0.0011 | 2026-10-29 | In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/us | |
CVE-2026-17432 |
low | 1.3 | 0.0036 | 2026-10-29 | A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulne | |
CVE-2026-17433 |
low | 1.9 | 0.0015 | 2026-10-29 | A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function | |
CVE-2026-17434 |
low | 2.1 | 0.0037 | 2026-10-29 | A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAd | |
CVE-2026-63720 |
high | 7.5 | 0.0074 | 2026-10-29 | datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability t | |
CVE-2024-14040 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increas | |
CVE-2026-17457 |
low | 2.1 | 0.0042 | 2026-10-29 | A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue | |
CVE-2026-17458 |
low | 2.1 | 0.0040 | 2026-10-29 | A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function cl | |
CVE-2026-17459 |
low | 2.1 | 0.0047 | 2026-10-29 | A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects | |
CVE-2026-17496 |
high | 8.1 | 0.0055 | 2026-10-29 | NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true | |
CVE-2026-17497 |
high | 8.3 | 0.0075 | 2026-10-29 | NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bas | |
CVE-2026-57978 |
medium | 5.4 | 0.0021 | 2026-10-29 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-57989 |
high | 7.4 | 0.0043 | 2026-10-29 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-57990 |
high | 7.4 | 0.0092 | 2026-10-29 | Files or directories accessible to external parties in Microsoft Edge (Chromium-based) all | |
CVE-2026-17500 |
medium | 6.9 | 0.0072 | 2026-10-29 | A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the funct | |
CVE-2026-17501 |
medium | 6.9 | 0.0072 | 2026-10-29 | A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the functi | |
CVE-2026-65893 |
high | 7.0 | 0.0023 | 2026-10-29 | This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature ena | |
CVE-2026-65894 |
high | 8.7 | 0.0066 | 2026-10-29 | This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HT | |
CVE-2026-16554 |
medium | 5.1 | 0.0037 | 2026-10-29 | cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in c | |
CVE-2026-65764 |
medium | 5.1 | 0.0044 | 2026-10-29 | Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 - | |
CVE-2026-65765 |
medium | 6.9 | 0.0047 | 2026-10-29 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 | |
CVE-2026-17527 |
high | 7.7 | 0.0058 | 2026-10-29 | In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, int | |
CVE-2026-17534 |
medium | 5.5 | 0.0016 | 2026-10-29 | Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a s | |
CVE-2026-40000 |
low | 1.8 | 0.0020 | 2026-10-29 | The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager | |
CVE-2026-12495 |
medium | 5.3 | 0.0025 | 2026-10-29 | Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decr | |
CVE-2026-14856 |
medium | 6.3 | 0.0039 | 2026-10-29 | A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the | |
CVE-2026-41608 |
high | 7.5 | 0.0103 | 2026-10-29 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache T | |
CVE-2026-43871 |
high | 8.7 | 0.0103 | 2026-10-29 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Pyth | |
CVE-2026-45112 |
medium | 6.9 | 0.0103 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java b | |
CVE-2026-48144 |
critical | 9.1 | 0.0040 | 2026-10-29 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_gli | |
CVE-2026-48145 |
high | 8.2 | 0.0042 | 2026-10-29 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ b | |
CVE-2026-48586 |
high | 8.7 | 0.0103 | 2026-10-29 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache T | |
CVE-2026-49158 |
high | 7.5 | 0.0103 | 2026-10-29 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache T | |
CVE-2026-55968 |
high | 8.7 | 0.0103 | 2026-10-29 | Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling v | |
CVE-2026-55969 |
high | 8.7 | 0.0103 | 2026-10-29 | Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Del | |
CVE-2026-55970 |
medium | 6.9 | 0.0077 | 2026-10-29 | Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache T | |
CVE-2026-55971 |
critical | 9.3 | 0.0098 | 2026-10-29 | Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affect |