Browse All CVEs
34,218 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-14258 |
medium | 6.5 | 0.0040 | 2026-10-29 | A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A sp | |
CVE-2026-13323 |
high | 8.7 | 0.0033 | 2026-10-29 | In Open VSX Registry before 1.0.2, the /vscode/unpkg/ endpoint serves user-supplied HTML f | |
CVE-2026-53902 |
high | 7.1 | 0.0034 | 2026-10-29 | MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/pro | |
CVE-2026-53903 |
medium | 5.3 | 0.0041 | 2026-10-29 | MCO is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in the /cust | |
CVE-2026-53904 |
medium | 6.3 | 0.0034 | 2026-10-29 | MCO is vulnerable to Account Denial of Service due to improper implementation of password | |
CVE-2026-53905 |
medium | 5.3 | 0.0032 | 2026-10-29 | MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/adm | |
CVE-2026-53906 |
medium | 5.1 | 0.0052 | 2026-10-29 | MCO is vulnerable to Path Disclosure and Path Traversal in file handling functionality rel | |
CVE-2026-53907 |
medium | 4.8 | 0.0024 | 2026-10-29 | MCO is vulnerable to Stored Cross‑Site Scripting (XSS) via the application logo upload fun | |
CVE-2026-53908 |
medium | 6.9 | 0.0036 | 2026-10-29 | MCO is vulnerable to User Enumeration through authentication-related functionalities. The | |
CVE-2026-53909 |
medium | 5.3 | 0.0039 | 2026-10-29 | MCO does not correctly validate types of uploaded files. File upload validation functional | |
CVE-2026-5120 |
high | 8.1 | 0.0033 | 2026-10-29 | A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release | |
CVE-2026-8387 |
low | 2.4 | 0.0042 | 2026-10-29 | A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relati | |
CVE-2026-13603 |
critical | 9.0 | 0.0041 | 2026-10-29 | The payment integration pretix-oppwa provides support for the payment providers VR Paymen | |
CVE-2026-57692 |
critical | 9.8 | 0.0053 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Esca | |
CVE-2026-12374 |
medium | 6.4 | 0.0007 | 2026-10-29 | Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in | |
CVE-2026-58031 |
none | — | 0.0027 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-58034 |
none | — | 0.0029 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-58035 |
none | — | 0.0029 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-58399 |
high | 8.7 | 0.0097 | 2026-10-29 | @acastellon/auth is an authentication control system for microservices. Versions prior to | |
CVE-2026-5220 |
medium | 6.4 | 0.0025 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-6283 |
medium | 5.4 | 0.0023 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-6682 |
high | 7.6 | 0.0032 | 2026-10-29 | In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where f | |
CVE-2026-6683 |
medium | 4.6 | 0.0031 | 2026-10-29 | FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted met | |
CVE-2026-6684 |
medium | 4.6 | 0.0031 | 2026-10-29 | FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an | |
CVE-2026-6686 |
medium | 4.6 | 0.0026 | 2026-10-29 | FatFs R0.16 and earlier contains an uninitialized cluster exposure when f_lseek() extends | |
CVE-2026-6687 |
high | 7.6 | 0.0035 | 2026-10-29 | FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label | |
CVE-2026-6688 |
high | 7.6 | 0.0032 | 2026-10-29 | FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with | |
CVE-2026-13706 |
none | — | 0.0048 | 2026-10-29 | Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulne | |
CVE-2026-13707 |
none | — | 0.0034 | 2026-10-29 | Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is asso | |
CVE-2026-24240 |
high | 7.8 | 0.0043 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause de | |
CVE-2026-24242 |
high | 7.8 | 0.0019 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause se | |
CVE-2026-24243 |
high | 7.8 | 0.0043 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause de | |
CVE-2026-24244 |
high | 7.8 | 0.0043 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause de | |
CVE-2026-24245 |
high | 7.8 | 0.0043 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause de | |
CVE-2026-24246 |
high | 7.8 | 0.0043 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause im | |
CVE-2026-24247 |
high | 7.8 | 0.0043 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause de | |
CVE-2026-24248 |
high | 7.8 | 0.0024 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause im | |
CVE-2026-24249 |
high | 7.8 | 0.0023 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause de | |
CVE-2026-24250 |
high | 7.8 | 0.0040 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause im | |
CVE-2026-24251 |
high | 7.8 | 0.0040 | 2026-10-29 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause im | |
CVE-2026-24264 |
high | 7.5 | 0.0072 | 2026-10-29 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can ca | |
CVE-2026-24266 |
high | 7.5 | 0.0067 | 2026-10-29 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can ca | |
CVE-2026-24270 |
critical | 9.8 | 0.0081 | 2026-10-29 | NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentic | |
CVE-2026-57517 |
critical | 9.3 | 0.0096 | 2026-10-29 | Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allo | |
CVE-2026-58024 |
medium | 5.1 | 0.0037 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-58025 |
medium | 5.9 | 0.0050 | 2026-10-29 | Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This | |
CVE-2026-58026 |
none | — | 0.0037 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-58027 |
medium | 5.3 | 0.0037 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-58029 |
medium | 5.3 | 0.0035 | 2026-10-29 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p | |
CVE-2026-58030 |
medium | 5.3 | 0.0027 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' |