Browse All CVEs
35,868 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-21046 |
high | 8.4 | 0.0013 | 2026-10-29 | Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 | |
CVE-2026-21048 |
high | 8.3 | 0.0052 | 2026-10-29 | Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul | |
CVE-2026-21049 |
high | 8.4 | 0.0015 | 2026-10-29 | Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local att | |
CVE-2026-21050 |
medium | 5.1 | 0.0015 | 2026-10-29 | Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local att | |
CVE-2026-21051 |
medium | 5.1 | 0.0015 | 2026-10-29 | Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows loca | |
CVE-2026-21052 |
medium | 6.8 | 0.0016 | 2026-10-29 | Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privile | |
CVE-2026-21053 |
medium | 5.1 | 0.0016 | 2026-10-29 | Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attacker | |
CVE-2026-21054 |
medium | 6.9 | 0.0015 | 2026-10-29 | Improper export of android application components in InputSharing prior to version 2.7.01. | |
CVE-2026-21055 |
high | 8.5 | 0.0017 | 2026-10-29 | Improper export of android application components in Bixby prior to version 4.0.70.8 allow | |
CVE-2026-21056 |
medium | 4.8 | 0.0013 | 2026-10-29 | Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attacker | |
CVE-2026-21057 |
medium | 6.8 | 0.0015 | 2026-10-29 | Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privilege | |
CVE-2026-28564 |
critical | 9.8 | 0.0068 | 2026-10-29 | Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnerability in | |
CVE-2026-40005 |
critical | 9.1 | 0.0054 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-40006 |
high | 7.5 | 0.0058 | 2026-10-29 | Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Thr | |
CVE-2026-40007 |
high | 7.5 | 0.0049 | 2026-10-29 | Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apache IoTDB. W | |
CVE-2026-40008 |
critical | 9.8 | 0.0060 | 2026-10-29 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnera | |
CVE-2026-40009 |
medium | 6.5 | 0.0035 | 2026-10-29 | Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB. Auth | |
CVE-2026-40452 |
high | 7.5 | 0.0043 | 2026-10-29 | Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. Authorizat | |
CVE-2026-40454 |
high | 7.5 | 0.0049 | 2026-10-29 | Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client. Ou | |
CVE-2026-15378 |
critical | 9.3 | 0.0053 | 2026-10-29 | A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remo | |
CVE-2026-41876 |
high | 8.7 | 0.0123 | 2026-10-29 | R-SOFT DMS is vulnerable to OS Command Injection in konwertujAction() function. The docume | |
CVE-2026-41877 |
medium | 5.1 | 0.0039 | 2026-10-29 | R-SOFT DMS is vulnerable to Stored XSS in file upload functionality. Authenticated attacke | |
CVE-2026-41878 |
high | 7.1 | 0.0047 | 2026-10-29 | R-SOFT DMS is vulnerable to Insecure Direct Object Reference (IDOR) attack in multiple fil | |
CVE-2026-41879 |
high | 8.2 | 0.0027 | 2026-10-29 | R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows a | |
CVE-2026-41880 |
critical | 9.0 | 0.0133 | 2026-10-29 | R-SOFT DMS is vulnerable to OS Command Injection in the Optical Character Recognition (OCR | |
CVE-2026-14461 |
medium | 5.1 | 0.0044 | 2026-10-29 | mtr is vulnerable to Out-of-bound read vulnerability in ipinfo_lookup() function. An attac | |
CVE-2026-58225 |
low | 2.1 | 0.0022 | 2026-10-29 | SQL Injection vulnerability in elixir-ecto postgrex allows an attacker who can influence a | |
CVE-2026-54468 |
medium | 6.5 | 0.0045 | 2026-10-29 | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vu | |
CVE-2026-56688 |
critical | 9.1 | 0.0200 | 2026-10-29 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of | |
CVE-2026-56689 |
high | 7.7 | 0.0037 | 2026-10-29 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of | |
CVE-2026-56690 |
high | 8.5 | 0.0032 | 2026-10-29 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of | |
CVE-2026-56814 |
medium | 6.9 | 0.0108 | 2026-10-29 | Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and | |
CVE-2026-54469 |
high | 8.8 | 0.0086 | 2026-10-29 | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization o | |
CVE-2026-54470 |
medium | 5.3 | 0.0030 | 2026-10-29 | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restrict | |
CVE-2026-56813 |
low | 2.1 | 0.0022 | 2026-10-29 | Improper Neutralization of Parameter/Argument Delimiters vulnerability in elixir-plug plug | |
CVE-2026-56254 |
high | 8.3 | 0.0019 | 2026-10-29 | In @capgo/capacitor-updater (Cap-go/capgo) before 12.128.2, the end-to-end encryption sche | |
CVE-2026-56261 |
critical | 9.2 | 0.0051 | 2026-10-29 | Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the D | |
CVE-2026-56305 |
high | 8.7 | 0.0045 | 2026-10-29 | Capgo before 12.128.2 contains an authentication bypass vulnerability in the password chan | |
CVE-2026-56309 |
medium | 5.3 | 0.0031 | 2026-10-29 | Capgo before 12.128.2 fails to enforce plan/quota restrictions on the /files/upload/attach | |
CVE-2026-56312 |
medium | 6.9 | 0.0038 | 2026-10-29 | Capgo before 12.128.2 contains an improper validation vulnerability in the accept_invitati | |
CVE-2026-56335 |
high | 7.1 | 0.0036 | 2026-10-29 | Capgo before 12.128.2 contains an authorization bypass vulnerability where write-scoped AP | |
CVE-2026-56366 |
medium | 4.8 | 0.0017 | 2026-10-29 | ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when p | |
CVE-2026-56373 |
medium | 6.3 | 0.0023 | 2026-10-29 | ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder tha | |
CVE-2026-58661 |
medium | 5.3 | 0.0039 | 2026-10-29 | n8n before 2.28.0 (and before 1.123.58 on the 1.x branch) contains a disk space exhaustion | |
CVE-2026-59791 |
low | 3.5 | 0.0023 | 2026-10-29 | In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was | |
CVE-2026-59792 |
critical | 9.8 | 0.0060 | 2026-10-29 | In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in p | |
CVE-2026-59793 |
high | 8.8 | 0.0049 | 2026-10-29 | In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce | |
CVE-2026-59794 |
medium | 5.4 | 0.0032 | 2026-10-29 | In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible vi | |
CVE-2026-59795 |
medium | 6.1 | 0.0034 | 2026-10-29 | In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration wa | |
CVE-2026-59796 |
high | 8.1 | 0.0035 | 2026-10-29 | In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper p |