Browse All CVEs
33,345 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-54819 |
critical | 9.3 | 0.0023 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-55738 |
high | 8.7 | 0.0040 | 2026-10-29 | A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rx | |
CVE-2026-11311 |
high | 8.6 | 0.0057 | 2026-10-29 | When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vul | |
CVE-2026-22283 |
high | 7.5 | 0.0021 | 2026-10-29 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Inclusion of Functional | |
CVE-2026-32804 |
high | 8.1 | 0.0023 | 2026-10-29 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication | |
CVE-2026-35065 |
high | 8.8 | 0.0035 | 2026-10-29 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication f | |
CVE-2026-35066 |
high | 7.1 | 0.0018 | 2026-10-29 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control | |
CVE-2026-35067 |
high | 8.0 | 0.0015 | 2026-10-29 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control | |
CVE-2026-35162 |
medium | 6.5 | 0.0021 | 2026-10-29 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control | |
CVE-2026-40641 |
medium | 4.8 | 0.0010 | 2026-10-29 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risk | |
CVE-2026-42530 |
critical | 9.2 | 0.0622 | 2026-10-29 | NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open So | |
CVE-2026-47103 |
critical | 9.3 | 0.0136 | 2026-10-29 | Python StateMachine versions 3.0.0 before 3.2.0 contains a remote code execution vulnerabi | |
CVE-2026-48117 |
medium | 6.8 | 0.0018 | 2026-10-29 | DroneAware is a drone detection platform. The centralized DroneAware server backing dronea | |
CVE-2026-49502 |
high | 8.1 | 0.0021 | 2026-10-29 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication | |
CVE-2026-54415 |
high | 8.6 | 0.0035 | 2026-10-29 | Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azurio | |
CVE-2026-54810 |
high | 7.5 | 0.0024 | 2026-10-29 | Missing Authorization vulnerability in Nexi Payments Nexi XPay allows Exploiting Incorrect | |
CVE-2026-54812 |
critical | 9.3 | 0.0028 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-55743 |
critical | 9.4 | 0.0039 | 2026-10-29 | The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through | |
CVE-2026-55748 |
medium | 6.8 | 0.0025 | 2026-10-29 | OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that ma | |
CVE-2026-1288 |
medium | 5.5 | 0.0012 | 2026-10-29 | A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Au | |
CVE-2026-20220 |
medium | 6.3 | 0.0025 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco Crosswork Network Controlle | |
CVE-2026-20246 |
medium | 6.0 | 0.0010 | 2026-10-29 | A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an auth | |
CVE-2026-32652 |
high | 7.8 | 0.0010 | 2026-10-29 | Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulne | |
CVE-2026-35068 |
medium | 5.7 | 0.0019 | 2026-10-29 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization | |
CVE-2026-35069 |
high | 8.0 | 0.0023 | 2026-10-29 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization | |
CVE-2026-3490 |
critical | 10.0 | 0.0082 | 2026-10-29 | picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass | |
CVE-2026-53875 |
high | 7.1 | 0.0055 | 2026-10-29 | picklescan before 1.0.3 contains a scanning bypass vulnerability in the scan_pytorch funct | |
CVE-2026-20178 |
medium | 4.3 | 0.0020 | 2026-10-29 | A vulnerability in the browser-based version of Cisco Webex App could have allowed an unau | |
CVE-2026-20265 |
medium | 4.3 | 0.0022 | 2026-10-29 | In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "a | |
CVE-2026-20266 |
critical | 9.1 | 0.0063 | 2026-10-29 | In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could | |
CVE-2026-2467 |
critical | 9.2 | 0.0019 | 2026-10-29 | Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allo | |
CVE-2026-2674 |
medium | 4.8 | 0.0018 | 2026-10-29 | Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libra | |
CVE-2026-2675 |
medium | 6.0 | 0.0021 | 2026-10-29 | Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Se | |
CVE-2026-30799 |
medium | 6.1 | 0.0026 | 2026-10-29 | Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Se | |
CVE-2026-30802 |
high | 8.8 | 0.0025 | 2026-10-29 | Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buf | |
CVE-2026-30803 |
high | 8.8 | 0.0030 | 2026-10-29 | Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) | |
CVE-2026-39199 |
low | 2.9 | 0.0013 | 2026-10-29 | snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file. | |
CVE-2026-3894 |
critical | 9.2 | 0.0020 | 2026-10-29 | Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overr | |
CVE-2026-47774 |
— | — | 0.0097 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Pri | |
CVE-2026-48591 |
medium | 4.8 | 0.0013 | 2026-10-29 | Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave ea | |
CVE-2026-53805 |
critical | 9.3 | 0.0087 | 2026-10-29 | NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code exec | |
CVE-2026-7300 |
high | 8.8 | 0.0025 | 2026-10-29 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RT | |
CVE-2026-48818 |
— | — | 0.0037 | 2026-10-29 | Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and earlier, StaticFi | |
CVE-2026-53869 |
high | 8.7 | 0.0059 | 2026-10-29 | Hermes Agent before 0.16.0 contains a DNS rebinding vulnerability in WebSocket endpoints t | |
CVE-2026-53870 |
medium | 6.8 | 0.0016 | 2026-10-29 | Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with w | |
CVE-2026-53871 |
high | 8.6 | 0.0037 | 2026-10-29 | Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the get_pro | |
CVE-2026-55197 |
high | 7.1 | 0.0035 | 2026-10-29 | Hermes WebUI before 0.51.443 contains a broken access control vulnerability in the /api/se | |
CVE-2026-55198 |
high | 7.1 | 0.0035 | 2026-10-29 | Hermes WebUI before 0.51.443 contains an authorization bypass vulnerability in the session | |
CVE-2026-10696 |
high | 7.5 | 0.0027 | 2026-10-29 | Use of an incorrectly resolved name or reference in the pinget backend in Devolutions Uni | |
CVE-2026-10741 |
medium | 5.9 | 0.0027 | 2026-10-29 | Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in |