Browse All CVEs
35,924 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-43806 |
medium | 5.5 | 0.0014 | 2026-10-29 | A denial of service issue was addressed by removing the vulnerable code. This issue is fix | |
CVE-2026-43809 |
critical | 9.8 | 0.0060 | 2026-10-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in | |
CVE-2026-43811 |
medium | 4.7 | 0.0011 | 2026-10-29 | A race condition was addressed with improved checks. This issue is fixed in iOS 18.7.10 an | |
CVE-2026-43819 |
medium | 5.5 | 0.0016 | 2026-10-29 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in | |
CVE-2026-59728 |
medium | 4.3 | 0.0032 | 2026-10-29 | Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, th | |
CVE-2026-59730 |
low | 2.1 | 0.0046 | 2026-10-29 | Astro is a web framework for content-driven websites. In versions 8.1.0 through 11.0.1, wh | |
CVE-2026-64544 |
— | — | 0.0018 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_ke | |
CVE-2026-64691 |
critical | 9.8 | 0.0047 | 2026-10-29 | A buffer overflow was addressed with improved size validation. This issue is fixed in macO | |
CVE-2026-64694 |
critical | 9.8 | 0.0059 | 2026-10-29 | An integer overflow was addressed with improved input validation. This issue is fixed in m | |
CVE-2026-64695 |
critical | 9.8 | 0.0073 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 | |
CVE-2026-64696 |
critical | 9.8 | 0.0072 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-64697 |
critical | 9.8 | 0.0059 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-64698 |
critical | 9.8 | 0.0059 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-64699 |
medium | 5.5 | 0.0016 | 2026-10-29 | A memory initialization issue was addressed with improved memory handling. This issue is f | |
CVE-2026-64702 |
critical | 9.8 | 0.0054 | 2026-10-29 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in | |
CVE-2026-64703 |
critical | 9.8 | 0.0057 | 2026-10-29 | A use after free issue was addressed with improved memory management. This issue is fixed | |
CVE-2026-64704 |
critical | 9.8 | 0.0059 | 2026-10-29 | A type confusion issue was addressed with improved memory handling. This issue is fixed in | |
CVE-2026-64708 |
medium | 5.5 | 0.0017 | 2026-10-29 | A file quarantine bypass was addressed with additional checks. This issue is fixed in macO | |
CVE-2026-64710 |
medium | 5.5 | 0.0016 | 2026-10-29 | A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Seq | |
CVE-2026-64723 |
medium | 5.5 | 0.0015 | 2026-10-29 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and i | |
CVE-2026-64731 |
critical | 9.8 | 0.0061 | 2026-10-29 | A path handling issue was addressed with improved validation. This issue is fixed in macOS | |
CVE-2026-64732 |
medium | 4.6 | 0.0020 | 2026-10-29 | This issue was addressed through improved state management. This issue is fixed in iOS 18. | |
CVE-2026-64737 |
high | 8.2 | 0.0016 | 2026-10-29 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-64738 |
critical | 9.8 | 0.0056 | 2026-10-29 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS | |
CVE-2026-64744 |
medium | 5.5 | 0.0016 | 2026-10-29 | An information leakage was addressed with additional validation. This issue is fixed in iO | |
CVE-2026-64745 |
low | 2.4 | 0.0017 | 2026-10-29 | This issue was addressed with additional restrictions on the lock screen. This issue is fi | |
CVE-2026-64767 |
critical | 9.8 | 0.0089 | 2026-10-29 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macO | |
CVE-2026-53666 |
medium | 6.1 | 0.0042 | 2026-10-29 | React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code | |
CVE-2026-53667 |
medium | 6.1 | 0.0036 | 2026-10-29 | React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler | |
CVE-2026-53668 |
medium | 6.9 | 0.0034 | 2026-10-29 | React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7. | |
CVE-2026-53669 |
medium | 5.1 | 0.0032 | 2026-10-29 | React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open R | |
CVE-2026-55685 |
high | 8.7 | 0.0071 | 2026-10-29 | React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoin | |
CVE-2026-59240 |
medium | 6.9 | 0.0048 | 2026-10-29 | The vulnerability involves an Insecure Direct Object Reference (IDOR) in the `DeleteNotifi | |
CVE-2026-61953 |
high | 7.2 | 0.0027 | 2026-10-29 | Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 | |
CVE-2026-61957 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 version | |
CVE-2026-65438 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Message Filter for Contact Form 7 <= 1.6.3.9 | |
CVE-2026-65439 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <=3.5.45 | |
CVE-2026-65440 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions. | |
CVE-2026-65441 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions. | |
CVE-2026-65442 |
high | 7.2 | 0.0058 | 2026-10-29 | Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions. | |
CVE-2026-65443 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions. | |
CVE-2026-65445 |
medium | 6.5 | 0.0033 | 2026-10-29 | Unauthenticated Broken Access Control in Ad Invalid Click Protector (AICP) <= 1.3.0 versio | |
CVE-2026-65446 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions. | |
CVE-2026-66473 |
high | 7.5 | 0.0035 | 2026-10-29 | Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions. | |
CVE-2026-11756 |
critical | 10.0 | 0.0081 | 2026-10-29 | A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPE | |
CVE-2026-55977 |
low | 3.3 | 0.0013 | 2026-10-29 | Successful exploitation of this vulnerability could allow an attacker with local network a | |
CVE-2026-8167 |
medium | 6.1 | 0.0025 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-9680 |
medium | 5.8 | 0.0040 | 2026-10-29 | Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote a | |
CVE-2026-16462 |
critical | 9.3 | 0.0075 | 2026-10-29 | In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a re | |
CVE-2026-58246 |
medium | 4.3 | 0.0024 | 2026-10-29 | SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session ident |