Browse All CVEs
34,118 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-54887 |
medium | 6.3 | 0.0024 | 2026-10-29 | Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows pred | |
CVE-2026-54891 |
medium | 6.3 | 0.0014 | 2026-10-29 | Improper Enforcement of Message Integrity During Transmission in a Communication Channel v | |
CVE-2026-55950 |
high | 8.7 | 0.0038 | 2026-10-29 | Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_pa | |
CVE-2026-55952 |
high | 8.2 | 0.0048 | 2026-10-29 | The Erlang/OTP ssl application does not validate that the PSK identity list and binder lis | |
CVE-2026-8699 |
high | 7.0 | 0.0028 | 2026-10-29 | A stored Cross-Site Scripting (XSS) vulnerability has been identified in the web-based man | |
CVE-2026-13743 |
low | 3.3 | 0.0016 | 2026-10-29 | CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 are vulnerable to an Imp | |
CVE-2026-58465 |
high | 8.7 | 0.0092 | 2026-10-29 | Eclipse Wakaama before snapshot/2026-05-26 contains an unbounded memory allocation vulnera | |
CVE-2026-52187 |
high | 7.5 | 0.0052 | 2026-10-29 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote a | |
CVE-2026-58466 |
critical | 9.3 | 0.0080 | 2026-10-29 | AutoBangumi before 3.2.8 contains a hard-coded default credentials vulnerability that allo | |
CVE-2026-58467 |
high | 8.2 | 0.0173 | 2026-10-29 | Cockpit CMS through 2.14.0 contains a path traversal and local file inclusion vulnerabilit | |
CVE-2026-58579 |
medium | 5.1 | 0.0030 | 2026-10-29 | RAGFlow before 0.26.3 stores an agent pipeline (DSL) node name without sanitization: the a | |
CVE-2026-59092 |
high | 7.0 | 0.0066 | 2026-10-29 | JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerab | |
CVE-2026-59094 |
high | 8.7 | 0.0079 | 2026-10-29 | Pathway through 0.31.1, fixed in commit d09722e, document store applies a caller-supplied | |
CVE-2026-59096 |
high | 8.2 | 0.0034 | 2026-10-29 | Dapr Sentry's OIDC discovery endpoint derives the issuer and jwks_uri of the /.well-known/ | |
CVE-2026-59097 |
medium | 6.9 | 0.0043 | 2026-10-29 | Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthentic | |
CVE-2026-59098 |
high | 7.1 | 0.0042 | 2026-10-29 | LobeChat through 2.2.9 contains a broken access control vulnerability in the retrieval-aug | |
CVE-2026-59099 |
critical | 9.3 | 0.0055 | 2026-10-29 | Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remot | |
CVE-2026-59101 |
medium | 6.9 | 0.0050 | 2026-10-29 | AutoBangumi before 3.2.8 contains a server-side request forgery (SSRF) vulnerability that | |
CVE-2026-59102 |
low | 2.1 | 0.0035 | 2026-10-29 | Forgejo before 15.0.3 contains a stored cross-site scripting vulnerability that allows aut | |
CVE-2026-52188 |
medium | 6.5 | 0.0035 | 2026-10-29 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote a | |
CVE-2026-52189 |
high | 7.5 | 0.0052 | 2026-10-29 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote a | |
CVE-2026-52191 |
high | 7.5 | 0.0052 | 2026-10-29 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote a | |
CVE-2026-52192 |
high | 7.5 | 0.0058 | 2026-10-29 | An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a de | |
CVE-2026-52830 |
critical | 9.4 | 0.0065 | 2026-10-29 | fast-mcp-telegram is a Telegram MCP Server. Prior to 0.19.1, fast-mcp-telegram validates H | |
CVE-2026-58460 |
high | 7.0 | 0.0019 | 2026-10-29 | react-native-receive-sharing-intent contains a path traversal vulnerability that allows a | |
CVE-2026-12413 |
high | 7.5 | 0.0060 | 2026-10-29 | An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and resta | |
CVE-2026-50721 |
medium | 5.9 | 0.0039 | 2026-10-29 | Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly v | |
CVE-2026-50722 |
medium | 5.9 | 0.0035 | 2026-10-29 | Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not corre | |
CVE-2026-26145 |
medium | 4.8 | 0.0070 | 2026-10-29 | Improper access control in Azure Synapse allows an authorized attacker to elevate privileg | |
CVE-2026-41106 |
critical | 9.3 | 0.0072 | 2026-10-29 | Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized | |
CVE-2026-45499 |
critical | 9.9 | 0.0078 | 2026-10-29 | Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevat | |
CVE-2026-54998 |
high | 8.8 | 0.0078 | 2026-10-29 | Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elev | |
CVE-2026-57100 |
critical | 9.9 | 0.0078 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) al | |
CVE-2026-13050 |
high | 8.6 | 0.0064 | 2026-10-29 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allo | |
CVE-2026-13053 |
high | 8.6 | 0.0064 | 2026-10-29 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authen | |
CVE-2026-13054 |
high | 8.6 | 0.0060 | 2026-10-29 | A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a pr | |
CVE-2026-13079 |
high | 7.3 | 0.0014 | 2026-10-29 | A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client fo | |
CVE-2026-13084 |
high | 8.7 | 0.0061 | 2026-10-29 | A null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unau | |
CVE-2026-13368 |
critical | 9.2 | 0.0094 | 2026-10-29 | WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability | |
CVE-2026-13371 |
medium | 6.9 | 0.0059 | 2026-10-29 | An authenticated administrator can trigger a denial-of-service condition in the Fireware M | |
CVE-2026-13373 |
medium | 4.8 | 0.0027 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-13374 |
medium | 4.8 | 0.0027 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-13375 |
medium | 4.8 | 0.0027 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-13376 |
medium | 4.8 | 0.0027 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-13377 |
medium | 4.8 | 0.0027 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-13383 |
high | 8.6 | 0.0072 | 2026-10-29 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allo | |
CVE-2026-13384 |
high | 8.6 | 0.0072 | 2026-10-29 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow | |
CVE-2026-13722 |
high | 8.6 | 0.0033 | 2026-10-29 | WatchGuard Fireware OS contains a firmware validation bypass when processing a backup imag | |
CVE-2026-13728 |
medium | 5.9 | 0.0023 | 2026-10-29 | In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded e | |
CVE-2026-8247 |
high | 7.7 | 0.0038 | 2026-10-29 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticate |