Browse All CVEs
34,088 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-46591 |
high | 8.2 | 0.0055 | 2026-10-29 | Improper Neutralization of Special Elements in Data Query Logic vulnerability in Apache Ca | |
CVE-2026-46592 |
high | 7.5 | 0.0063 | 2026-10-29 | Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerabil | |
CVE-2026-46726 |
high | 7.5 | 0.0086 | 2026-10-29 | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Ser | |
CVE-2026-48203 |
critical | 9.1 | 0.0060 | 2026-10-29 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Inj | |
CVE-2026-48204 |
critical | 9.8 | 0.0073 | 2026-10-29 | Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel | |
CVE-2026-48205 |
critical | 9.1 | 0.0060 | 2026-10-29 | Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerability in Apache Came | |
CVE-2026-48206 |
medium | 5.3 | 0.0055 | 2026-10-29 | Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability | |
CVE-2026-49086 |
medium | 6.5 | 0.0068 | 2026-10-29 | Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerabil | |
CVE-2026-49097 |
medium | 6.5 | 0.0067 | 2026-10-29 | Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a | |
CVE-2026-12686 |
critical | 9.3 | 0.0037 | 2026-10-29 | An authenticated user could manipulate a company ID parameter in a POST request to the bac | |
CVE-2026-44936 |
medium | 5.0 | 0.0035 | 2026-10-29 | Missing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE | |
CVE-2026-44937 |
high | 8.3 | 0.0042 | 2026-10-29 | Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher | |
CVE-2026-46587 |
high | 7.3 | 0.0069 | 2026-10-29 | Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: | |
CVE-2026-46588 |
high | 7.3 | 0.0069 | 2026-10-29 | Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: | |
CVE-2026-49042 |
high | 7.3 | 0.0069 | 2026-10-29 | Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: | |
CVE-2026-49297 |
high | 8.1 | 0.0099 | 2026-10-29 | Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransfo | |
CVE-2026-56810 |
high | 8.7 | 0.0043 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint (Mi | |
CVE-2026-58226 |
high | 8.7 | 0.0057 | 2026-10-29 | Inefficient Algorithmic Complexity vulnerability in elixir-mint hpax allows unauthenticate | |
CVE-2026-6900 |
critical | 9.1 | 0.0022 | 2026-10-29 | Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL. Th | |
CVE-2026-6901 |
high | 8.4 | 0.0016 | 2026-10-29 | Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL. This issue a | |
CVE-2026-13705 |
high | 7.1 | 0.0018 | 2026-10-29 | Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager | |
CVE-2026-13708 |
high | 7.5 | 0.0061 | 2026-10-29 | Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG wit | |
CVE-2026-58203 |
medium | 5.3 | 0.0019 | 2026-10-29 | pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, N | |
CVE-2026-59152 |
medium | 5.0 | 0.0020 | 2026-10-29 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to | |
CVE-2026-40257 |
medium | 5.5 | 0.0015 | 2026-10-29 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linu | |
CVE-2026-43825 |
high | 7.3 | 0.1392 | 2026-10-29 | Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: befo | |
CVE-2026-48316 |
critical | 10.0 | 0.0112 | 2026-10-29 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validati | |
CVE-2026-41434 |
low | 3.3 | 0.0015 | 2026-10-29 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linu | |
CVE-2026-48614 |
critical | 9.9 | 0.0058 | 2026-10-29 | An improper authorization vulnerability in the Plesk XML API allows an authenticated user | |
CVE-2026-13753 |
high | 7.5 | 0.0046 | 2026-10-29 | Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclo | |
CVE-2026-54059 |
high | 7.5 | 0.0041 | 2026-10-29 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() re | |
CVE-2026-54060 |
high | 7.5 | 0.0042 | 2026-10-29 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() as | |
CVE-2026-55379 |
high | 7.5 | 0.0052 | 2026-10-29 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read th | |
CVE-2026-55380 |
high | 7.5 | 0.0052 | 2026-10-29 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open( | |
CVE-2026-55798 |
medium | 4.5 | 0.0018 | 2026-10-29 | Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() construct | |
CVE-2026-9181 |
high | 7.5 | 0.0122 | 2026-10-29 | Esri ArcGIS Server contains a directory traversal vulnerability. ArcGIS Enterprise on Kube | |
CVE-2026-9182 |
— | — | 0.0062 | 2026-10-29 | Esri ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated | |
CVE-2026-11405 |
critical | 9.8 | 0.0076 | 2026-10-29 | The web server binary /bin/httpd contains a hidden backdoor authentication mechanism in th | |
CVE-2026-14536 |
high | 8.8 | 0.0043 | 2026-10-29 | Improper enforcement of a mandatory multi-factor authentication policy in Devolutions Serv | |
CVE-2026-14898 |
medium | 6.5 | 0.0037 | 2026-10-29 | The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model respo | |
CVE-2026-41514 |
low | 3.3 | 0.0013 | 2026-10-29 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linu | |
CVE-2026-41515 |
low | 3.3 | 0.0013 | 2026-10-29 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linu | |
CVE-2026-41516 |
low | 3.3 | 0.0014 | 2026-10-29 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linu | |
CVE-2026-42546 |
low | 3.8 | 0.0015 | 2026-10-29 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linu | |
CVE-2026-44362 |
medium | 5.5 | 0.0018 | 2026-10-29 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linu | |
CVE-2026-50133 |
medium | 5.1 | 0.0033 | 2026-10-29 | Hugo is a static site generator. Prior to 0.162.0, Hugo accepts content files in several m | |
CVE-2026-50134 |
medium | 6.3 | 0.0040 | 2026-10-29 | Hugo is a static site generator. From 0.91.0 until 0.162.0, resources.GetRemote enforces s | |
CVE-2026-53763 |
low | 3.8 | 0.0019 | 2026-10-29 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linu | |
CVE-2026-55646 |
medium | 6.5 | 0.0052 | 2026-10-29 | vLLM is an inference and serving engine for large language models. From 0.22.0 to 0.23.0, | |
CVE-2026-58402 |
medium | 5.1 | 0.0030 | 2026-10-29 | Hugo is a static site generator. From 0.60.0 until 0.163.3, Hugo's default code-block rend |