Browse All CVEs
35,949 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-16481 |
medium | 6.0 | 0.0019 | 2026-10-29 | A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in t | |
CVE-2026-17612 |
medium | 6.9 | 0.0054 | 2026-10-29 | Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version | |
CVE-2026-64646 |
medium | 6.3 | 0.0052 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. In versions 13.0.0 | |
CVE-2026-64647 |
medium | 6.3 | 0.0032 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 | |
CVE-2026-66031 |
medium | 5.1 | 0.0029 | 2026-10-29 | Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vul | |
CVE-2026-42016 |
high | 8.8 | 0.0864 | 2026-10-29 | KEV | JFrog Artifactory contains an incorrect authorization vulnerability that leads to a privil |
CVE-2026-42017 |
high | 8.8 | 0.0052 | 2026-10-29 | An event-handling weakness in JFrog Artifactory could expose privileged authorization mate | |
CVE-2026-56747 |
high | 8.7 | 0.0067 | 2026-10-29 | Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl S | |
CVE-2026-56748 |
high | 8.7 | 0.0092 | 2026-10-29 | Improper validation of symbolic links in the Pack Git import feature in Cribl Stream befor | |
CVE-2026-59727 |
low | 2.1 | 0.0039 | 2026-10-29 | Astro is a web framework for content-driven websites. In versions 3.10.0 through 7.0.3, wh | |
CVE-2026-59729 |
medium | 5.1 | 0.0047 | 2026-10-29 | Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerab | |
CVE-2026-64648 |
medium | 6.0 | 0.0034 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 | |
CVE-2026-64649 |
high | 8.3 | 0.0046 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. In versions 14.1.1 | |
CVE-2026-65616 |
high | 8.8 | 0.0037 | 2026-10-29 | Incorrect authorization validation in refresh token signature allows non-admin users to ob | |
CVE-2026-65617 |
high | 8.8 | 0.0065 | 2026-10-29 | A deserialization weakness in JFrog Artifactory package handling could allow a low-privile | |
CVE-2026-65618 |
medium | 6.5 | 0.0035 | 2026-10-29 | Improper URL validation when handling specific URLs, allows an attacker, under certain con | |
CVE-2026-65921 |
high | 8.8 | 0.0059 | 2026-10-29 | A path validation weakness in archive extraction/write handling allows entries with traver | |
CVE-2026-65922 |
medium | 5.4 | 0.0034 | 2026-10-29 | An authorization weakness in JFrog Artifactory internal metadata handling could allow a us | |
CVE-2026-65923 |
medium | 6.8 | 0.0035 | 2026-10-29 | A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a u | |
CVE-2026-65924 |
medium | 6.5 | 0.0041 | 2026-10-29 | JFrog Artifactory support for Terraform remote repositories was found to be susceptible to | |
CVE-2026-65925 |
medium | 6.5 | 0.0040 | 2026-10-29 | A user with JFrog Artifactory Cargo remote repository read access could make Artifactory r | |
CVE-2026-66014 |
high | 8.8 | 0.0064 | 2026-10-29 | JFrog Artifactory contains an authentication handling weakness in internal request process | |
CVE-2026-66015 |
high | 7.2 | 0.0057 | 2026-10-29 | An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited und | |
CVE-2026-66018 |
medium | 6.5 | 0.0045 | 2026-10-29 | Build readers can access another repository's environment properties. A caller with read a | |
CVE-2026-20672 |
medium | 5.5 | 0.0017 | 2026-10-29 | An information disclosure issue was addressed with improved privacy controls. This issue i | |
CVE-2026-28849 |
medium | 5.5 | 0.0016 | 2026-10-29 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-28896 |
high | 7.7 | 0.0019 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and | |
CVE-2026-28900 |
medium | 5.5 | 0.0016 | 2026-10-29 | A file quarantine bypass was addressed with additional checks. This issue is fixed in macO | |
CVE-2026-28911 |
critical | 9.8 | 0.0050 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma | |
CVE-2026-28912 |
high | 7.8 | 0.0017 | 2026-10-29 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequo | |
CVE-2026-28926 |
high | 7.0 | 0.0012 | 2026-10-29 | A race condition was addressed with improved state handling. This issue is fixed in macOS | |
CVE-2026-28932 |
medium | 5.5 | 0.0016 | 2026-10-29 | A logic issue existed resulting in memory corruption. This was addressed with improved sta | |
CVE-2026-28945 |
high | 7.1 | 0.0016 | 2026-10-29 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixe | |
CVE-2026-28981 |
high | 7.8 | 0.0020 | 2026-10-29 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macO | |
CVE-2026-28982 |
critical | 9.8 | 0.0056 | 2026-10-29 | A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia | |
CVE-2026-39873 |
critical | 9.8 | 0.0059 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-39874 |
high | 7.8 | 0.0015 | 2026-10-29 | A permissions issue was addressed with additional restrictions. This issue is fixed in mac | |
CVE-2026-39875 |
high | 7.8 | 0.0015 | 2026-10-29 | 1 PoC | A permissions issue was addressed with additional restrictions. This issue is fixed in mac |
CVE-2026-39877 |
high | 7.8 | 0.0017 | 2026-10-29 | A memory corruption issue was addressed with improved memory handling. This issue is fixed | |
CVE-2026-43665 |
medium | 5.5 | 0.0013 | 2026-10-29 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS | |
CVE-2026-43672 |
high | 7.1 | 0.0016 | 2026-10-29 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-43681 |
high | 7.1 | 0.0017 | 2026-10-29 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macO | |
CVE-2026-43682 |
critical | 9.8 | 0.0072 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-43693 |
high | 7.0 | 0.0012 | 2026-10-29 | A race condition was addressed with improved state handling. This issue is fixed in macOS | |
CVE-2026-43694 |
critical | 9.8 | 0.0059 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-43698 |
high | 7.8 | 0.0022 | 2026-10-29 | An injection issue was addressed with improved validation. This issue is fixed in macOS Go | |
CVE-2026-43710 |
critical | 9.8 | 0.0059 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-43728 |
high | 7.5 | 0.0026 | 2026-10-29 | This issue was addressed through improved state management. This issue is fixed in macOS T | |
CVE-2026-43738 |
medium | 5.5 | 0.0017 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 | |
CVE-2026-43747 |
high | 7.1 | 0.0017 | 2026-10-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in |