Browse All CVEs
34,752 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-16381 |
critical | 9.1 | 0.0023 | 2026-10-29 | Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed i | |
CVE-2026-16382 |
critical | 9.8 | 0.0056 | 2026-10-29 | Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in F | |
CVE-2026-16383 |
critical | 9.8 | 0.0057 | 2026-10-29 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefo | |
CVE-2026-16384 |
high | 7.5 | 0.0043 | 2026-10-29 | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This | |
CVE-2026-16385 |
high | 7.5 | 0.0043 | 2026-10-29 | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This | |
CVE-2026-16386 |
high | 7.5 | 0.0043 | 2026-10-29 | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This | |
CVE-2026-16387 |
critical | 9.8 | 0.0028 | 2026-10-29 | Site isolation issue in the Networking component. This vulnerability was fixed in Firefox | |
CVE-2026-16388 |
critical | 9.8 | 0.0055 | 2026-10-29 | Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 1 | |
CVE-2026-16389 |
critical | 9.8 | 0.0064 | 2026-10-29 | Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vu | |
CVE-2026-16390 |
critical | 9.1 | 0.0044 | 2026-10-29 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Fi | |
CVE-2026-16391 |
high | 7.5 | 0.0044 | 2026-10-29 | Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed i | |
CVE-2026-16392 |
critical | 9.1 | 0.0053 | 2026-10-29 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed i | |
CVE-2026-16393 |
critical | 9.1 | 0.0054 | 2026-10-29 | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fi | |
CVE-2026-16394 |
critical | 9.1 | 0.0043 | 2026-10-29 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox | |
CVE-2026-16395 |
critical | 9.8 | 0.0062 | 2026-10-29 | Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16396 |
high | 8.8 | 0.0045 | 2026-10-29 | Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefo | |
CVE-2026-16397 |
medium | 6.5 | 0.0030 | 2026-10-29 | Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerabili | |
CVE-2026-16398 |
high | 7.5 | 0.0022 | 2026-10-29 | Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 15 | |
CVE-2026-16399 |
high | 7.5 | 0.0022 | 2026-10-29 | Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Fir | |
CVE-2026-16400 |
high | 7.5 | 0.0043 | 2026-10-29 | Information disclosure in the DOM: Security component. This vulnerability was fixed in Fir | |
CVE-2026-16401 |
high | 8.8 | 0.0040 | 2026-10-29 | Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed i | |
CVE-2026-16402 |
critical | 9.8 | 0.0062 | 2026-10-29 | Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Fire | |
CVE-2026-16403 |
medium | 6.5 | 0.0035 | 2026-10-29 | Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 a | |
CVE-2026-16404 |
high | 7.4 | 0.0027 | 2026-10-29 | Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153. | |
CVE-2026-16405 |
high | 7.5 | 0.0044 | 2026-10-29 | Information disclosure in the Networking: WebSockets component. This vulnerability was fix | |
CVE-2026-16406 |
critical | 9.1 | 0.0043 | 2026-10-29 | Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16407 |
critical | 9.8 | 0.0051 | 2026-10-29 | Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in F | |
CVE-2026-16408 |
critical | 9.8 | 0.0062 | 2026-10-29 | Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in F | |
CVE-2026-16409 |
high | 7.5 | 0.0052 | 2026-10-29 | Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 15 | |
CVE-2026-16410 |
critical | 9.8 | 0.0055 | 2026-10-29 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed i | |
CVE-2026-16445 |
high | 7.5 | 0.0322 | 2026-10-29 | A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vul | |
CVE-2026-6792 |
medium | 6.5 | 0.0034 | 2026-10-29 | Missing Authorization vulnerability in Universal Software Inc. FlexCity allows Exploiting | |
CVE-2026-8284 |
medium | 6.1 | 0.0024 | 2026-10-29 | URL redirection to untrusted site ('open redirect') vulnerability in Universal Software In | |
CVE-2026-8285 |
medium | 4.3 | 0.0041 | 2026-10-29 | Improper restriction of excessive authentication attempts vulnerability in Universal Softw | |
CVE-2026-16447 |
medium | 5.5 | 0.0157 | 2026-10-29 | A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of | |
CVE-2026-47121 |
medium | 6.1 | 0.0034 | 2026-10-29 | Sparkle is a software update framework for macOS. Prior to version 2.9.2, `Autoupdate/SUBi | |
CVE-2026-11876 |
medium | 5.0 | 0.0023 | 2026-10-29 | In zenml-io/zenml version 0.94.2, the `GET /api/v1/stack-deployment/stack` endpoint (`get_ | |
CVE-2026-46681 |
high | 7.2 | 0.0036 | 2026-10-29 | @nevware21/ts-utils is a comprehensive TypeScript/JavaScript utility library. Prior to ver | |
CVE-2026-47122 |
medium | 4.2 | 0.0010 | 2026-10-29 | Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, ` | |
CVE-2026-56584 |
medium | 5.3 | 0.0029 | 2026-10-29 | HCL IEM was affected with the Information disclosure nginx server. It may enable attackers | |
CVE-2026-56587 |
low | 3.7 | 0.0024 | 2026-10-29 | HCL IEM was affected with Strict transport security not enforced. It may enable attackers | |
CVE-2026-65048 |
critical | 9.3 | 0.0054 | 2026-10-29 | Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticate | |
CVE-2026-65049 |
high | 8.4 | 0.0044 | 2026-10-29 | Ninja Forms plugin version 3.14.8 and prior for WordPress Multisite contains an incorrect | |
CVE-2026-65050 |
high | 7.1 | 0.0044 | 2026-10-29 | Ninja Forms WordPress plugin version 3.14.8 and prior contains a missing authorization vul | |
CVE-2026-65051 |
medium | 6.9 | 0.0049 | 2026-10-29 | Ninja Forms WordPress plugin version 3.14.8 contains a client-side enforcement of server-s | |
CVE-2026-65052 |
high | 8.7 | 0.0058 | 2026-10-29 | Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validatio | |
CVE-2026-16449 |
low | 2.1 | 0.0032 | 2026-10-29 | A vulnerability was determined in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c3 | |
CVE-2026-16450 |
low | 2.1 | 0.0037 | 2026-10-29 | A vulnerability was identified in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c3 | |
CVE-2026-28302 |
critical | 9.1 | 0.0079 | 2026-10-29 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability | |
CVE-2026-28304 |
critical | 9.1 | 0.0079 | 2026-10-29 | SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploite |