Browse All CVEs
34,237 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-14146 |
medium | 6.5 | 0.0032 | 2026-10-29 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remo | |
CVE-2026-14147 |
medium | 6.1 | 0.0022 | 2026-10-29 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remo | |
CVE-2026-14148 |
medium | 6.5 | 0.0032 | 2026-10-29 | Type Confusion in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to | |
CVE-2026-14149 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Audio in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote | |
CVE-2026-14150 |
medium | 5.4 | 0.0022 | 2026-10-29 | Insufficient validation of untrusted input in Speech in Google Chrome prior to 150.0.7871. | |
CVE-2026-14151 |
high | 8.3 | 0.0033 | 2026-10-29 | Inappropriate implementation in AI in Google Chrome prior to 150.0.7871.47 allowed a remot | |
CVE-2026-14152 |
critical | 9.6 | 0.0024 | 2026-10-29 | Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a re | |
CVE-2026-14153 |
medium | 5.3 | 0.0026 | 2026-10-29 | Inappropriate implementation in Glic in Google Chrome prior to 150.0.7871.47 allowed a rem | |
CVE-2026-14154 |
medium | 4.8 | 0.0019 | 2026-10-29 | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a | |
CVE-2026-14155 |
medium | 6.5 | 0.0031 | 2026-10-29 | Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.4 | |
CVE-2026-14156 |
medium | 6.5 | 0.0029 | 2026-10-29 | Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.4 | |
CVE-2026-28322 |
medium | 5.6 | 0.0039 | 2026-10-29 | SolarWinds Database Performance Analyzer was found to be affected by a stored cross-site s | |
CVE-2026-52193 |
high | 7.5 | 0.0051 | 2026-10-29 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote a | |
CVE-2026-52195 |
high | 7.5 | 0.0052 | 2026-10-29 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote a | |
CVE-2026-52197 |
high | 7.5 | 0.0049 | 2026-10-29 | An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a de | |
CVE-2026-54696 |
low | 3.7 | 0.0041 | 2026-10-29 | Ruby JSON is a JSON implementation for Ruby. Versions 2.9.0 through 2.19.8 are vulnerable | |
CVE-2026-55223 |
medium | 6.3 | 0.0048 | 2026-10-29 | c3p0 is a JDBC Connection pooling library. In versions prior to 0.14.0, c3p0 in combinati | |
CVE-2026-56320 |
high | 7.1 | 0.0028 | 2026-10-29 | Capgo before 12.128.2 contains an authorization flaw in POST /private/create_device that a | |
CVE-2026-56327 |
medium | 6.9 | 0.0034 | 2026-10-29 | Capgo before 12.128.2 contains an information disclosure vulnerability in the public.invit | |
CVE-2026-56333 |
medium | 5.3 | 0.0028 | 2026-10-29 | Capgo before 12.128.2 contains a server-side validation bypass vulnerability in organizati | |
CVE-2026-56363 |
medium | 4.8 | 0.0011 | 2026-10-29 | ImageMagick before 7.1.2-22 contains a division by zero vulnerability in binomial kernel p | |
CVE-2026-56364 |
low | 1.8 | 0.0015 | 2026-10-29 | ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchm | |
CVE-2026-56365 |
medium | 6.3 | 0.0028 | 2026-10-29 | ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when w | |
CVE-2026-56377 |
medium | 4.8 | 0.0016 | 2026-10-29 | ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to cr | |
CVE-2026-56777 |
medium | 5.3 | 0.0033 | 2026-10-29 | n8n before 2.25.7 and 2.26.x before 2.26.2 contains an abstract syntax tree (AST) security | |
CVE-2026-54500 |
medium | 5.3 | 0.0020 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-54502 |
medium | 6.3 | 0.0040 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-54592 |
high | 7.5 | 0.0033 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-54896 |
low | 2.1 | 0.0020 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-54897 |
low | 2.1 | 0.0020 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior t | |
CVE-2026-54898 |
low | 2.1 | 0.0020 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-54899 |
medium | 6.3 | 0.0041 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior t | |
CVE-2026-54900 |
medium | 6.3 | 0.0052 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-54901 |
medium | 6.3 | 0.0041 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-54902 |
medium | 6.3 | 0.0050 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior t | |
CVE-2026-54903 |
medium | 6.3 | 0.0041 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-41579 |
low | 3.3 | 0.0019 | 2026-10-29 | runc is a CLI tool for spawning and running containers according to the OCI specification. | |
CVE-2026-57962 |
medium | 5.3 | 0.0034 | 2026-10-29 | A malicious LDAP server, which a Thunderbird user is configured to query for address-book | |
CVE-2026-57963 |
medium | 6.5 | 0.0031 | 2026-10-29 | An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styl | |
CVE-2026-20457 |
medium | 5.3 | 0.0029 | 2026-10-29 | In Modem, there is a possible system crash due to improper input validation. This could le | |
CVE-2026-20458 |
high | 7.5 | 0.0033 | 2026-10-29 | In Modem, there is a possible memory corruption due to a missing bounds check. This could | |
CVE-2026-20459 |
medium | 5.3 | 0.0026 | 2026-10-29 | In Modem, there is a possible system crash due to improper input validation. This could le | |
CVE-2026-20460 |
medium | 5.3 | 0.0026 | 2026-10-29 | In Modem, there is a possible information disclosure due to improper input validation. Thi | |
CVE-2026-20461 |
medium | 5.3 | 0.0028 | 2026-10-29 | In Modem, there is a possible out of bounds write due to a missing bounds check. This coul | |
CVE-2026-20462 |
medium | 6.7 | 0.0016 | 2026-10-29 | In Telephony, there is a possible memory corruption due to a heap buffer overflow. This co | |
CVE-2026-20463 |
medium | 6.7 | 0.0016 | 2026-10-29 | In Modem, there is a possible escalation of privilege due to a permissions bypass. This co | |
CVE-2026-44040 |
medium | 6.5 | 0.0040 | 2026-10-29 | UltraVNC through 1.8.2.2 uses a cryptographically weak pseudo-random number generator to p | |
CVE-2026-44041 |
medium | 6.5 | 0.0041 | 2026-10-29 | UltraVNC through 1.8.2.2 contains an out-of-bounds read in the wide-string to multibyte co | |
CVE-2026-44042 |
low | 3.7 | 0.0049 | 2026-10-29 | UltraVNC repeater through 1.8.2.2 contains an off-by-one error in the Base64 decode helper | |
CVE-2026-58518 |
medium | 6.9 | 0.0013 | 2026-10-29 | Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - Re |