Browse All CVEs
33,319 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42895 |
high | 7.5 | 0.0071 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Mic | |
CVE-2026-45480 |
critical | 10.0 | 0.0090 | 2026-10-29 | Improper authentication in Azure Active Directory allows an unauthorized attacker to eleva | |
CVE-2026-47645 |
high | 8.8 | 0.0076 | 2026-10-29 | Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Ch | |
CVE-2026-48129 |
medium | 6.5 | 0.0036 | 2026-10-29 | Kestra is an open-source, event-driven orchestration platform. Prior to versions 1.3.19, 1 | |
CVE-2026-48582 |
critical | 9.6 | 0.0069 | 2026-10-29 | Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevat | |
CVE-2026-48584 |
high | 8.8 | 0.0091 | 2026-10-29 | Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to el | |
CVE-2026-49295 |
high | 7.1 | 0.0034 | 2026-10-29 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.2 | |
CVE-2026-49337 |
medium | 4.3 | 0.0024 | 2026-10-29 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.2 | |
CVE-2026-49346 |
high | 7.1 | 0.0037 | 2026-10-29 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0 | |
CVE-2026-50519 |
high | 7.5 | 0.0092 | 2026-10-29 | Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio | |
CVE-2026-50559 |
— | — | 0.0102 | 2026-10-29 | Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37 | |
CVE-2026-56073 |
critical | 9.3 | 0.0023 | 2026-10-29 | Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verification | |
CVE-2026-56080 |
medium | 6.9 | 0.0036 | 2026-10-29 | Capgo before 12.128.2 contains a flaw in the Enforce Password Policy feature: after a Supe | |
CVE-2026-56081 |
critical | 9.3 | 0.0043 | 2026-10-29 | Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker registe | |
CVE-2026-56082 |
high | 8.7 | 0.0037 | 2026-10-29 | Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in | |
CVE-2026-9265 |
critical | 9.1 | 0.0063 | 2026-10-29 | Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attr | |
CVE-2026-48908 |
critical | 10.0 | 0.8851 | 2026-10-29 | KEV | JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vul |
CVE-2026-48909 |
critical | 9.5 | 0.0494 | 2026-10-29 | SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without | |
CVE-2026-48939 |
critical | 10.0 | 0.2007 | 2026-10-29 | KEV | iCagenda contains an unrestricted upload of file with dangerous type vulnerability that al |
CVE-2024-58351 |
critical | 9.3 | 0.0093 | 2026-10-29 | Flowise before 2.1.4 allows configuration to be injected into the Chainflow during executi | |
CVE-2026-56235 |
medium | 6.9 | 0.0035 | 2026-10-29 | Cap-go capgo before 12.128.2 contains an authorization bypass in several Supabase PostgRES | |
CVE-2026-56307 |
medium | 5.3 | 0.0028 | 2026-10-29 | Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/ | |
CVE-2026-5366 |
critical | 9.9 | 0.0103 | 2026-10-29 | Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of | |
CVE-2026-56340 |
high | 8.7 | 0.0064 | 2026-10-29 | vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal em | |
CVE-2026-56347 |
medium | 5.3 | 0.0020 | 2026-10-29 | AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerab | |
CVE-2026-56355 |
low | 3.7 | 0.0040 | 2026-10-29 | GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorizati | |
CVE-2026-12770 |
low | 2.1 | 0.0057 | 2026-10-29 | A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an | |
CVE-2026-12771 |
low | 1.3 | 0.0043 | 2026-10-29 | A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown fu | |
CVE-2026-12772 |
low | 2.1 | 0.0040 | 2026-10-29 | A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the func | |
CVE-2026-12773 |
medium | 5.5 | 0.0102 | 2026-10-29 | A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function U | |
CVE-2026-12774 |
low | 2.1 | 0.0040 | 2026-10-29 | A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by th | |
CVE-2026-12775 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef | |
CVE-2026-12776 |
low | 2.1 | 0.0032 | 2026-10-29 | A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268 | |
CVE-2026-12778 |
high | 7.1 | 0.0016 | 2026-10-29 | A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerabil | |
CVE-2026-12779 |
high | 7.1 | 0.0016 | 2026-10-29 | A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects | |
CVE-2026-12780 |
high | 7.1 | 0.0016 | 2026-10-29 | A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown func | |
CVE-2026-12781 |
high | 7.1 | 0.0016 | 2026-10-29 | A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element | |
CVE-2026-12782 |
high | 7.1 | 0.0016 | 2026-10-29 | A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted el | |
CVE-2026-12784 |
high | 7.1 | 0.0016 | 2026-10-29 | A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an | |
CVE-2026-12786 |
high | 7.1 | 0.0016 | 2026-10-29 | A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected | |
CVE-2026-12787 |
low | 2.1 | 0.0041 | 2026-10-29 | A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发 | |
CVE-2026-12788 |
low | 2.1 | 0.0040 | 2026-10-29 | A vulnerability was determined in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform | |
CVE-2026-12789 |
low | 2.0 | 0.0033 | 2026-10-29 | A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affect | |
CVE-2026-12795 |
medium | 5.5 | 0.0080 | 2026-10-29 | A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function | |
CVE-2026-12796 |
low | 2.1 | 0.0057 | 2026-10-29 | A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function | |
CVE-2026-12797 |
low | 2.1 | 0.0040 | 2026-10-29 | A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the funct | |
CVE-2026-12798 |
low | 2.1 | 0.0040 | 2026-10-29 | A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerabi | |
CVE-2026-12799 |
low | 2.1 | 0.0043 | 2026-10-29 | A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by th | |
CVE-2026-56236 |
medium | 6.8 | 0.0018 | 2026-10-29 | Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and b | |
CVE-2026-56316 |
medium | 6.9 | 0.0031 | 2026-10-29 | Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /bu |