Browse All CVEs
33,206 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-8043 |
critical | 9.6 | 0.0087 | 2026-10-29 | External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote | |
CVE-2026-8051 |
high | 7.2 | 0.0191 | 2026-10-29 | OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remo | |
CVE-2026-8109 |
medium | 6.5 | 0.0070 | 2026-10-29 | An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2 | |
CVE-2026-8110 |
high | 7.8 | 0.0024 | 2026-10-29 | Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 20 | |
CVE-2026-8111 |
high | 8.8 | 0.0631 | 2026-10-29 | SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows | |
CVE-2026-8368 |
medium | 6.5 | 0.0027 | 2026-10-29 | LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization he | |
CVE-2026-8401 |
— | — | 0.0031 | 2026-10-29 | Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 15 | |
CVE-2023-27753 |
high | 8.0 | 0.0033 | 2026-10-29 | An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute ar | |
CVE-2023-30059 |
medium | 5.4 | 0.0017 | 2026-10-29 | An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and se | |
CVE-2026-41284 |
high | 7.5 | 0.0084 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This | |
CVE-2026-41293 |
critical | 9.8 | 0.0170 | 2026-10-29 | Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomca | |
CVE-2026-42498 |
high | 7.3 | 0.0065 | 2026-10-29 | Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication | |
CVE-2026-43512 |
critical | 9.8 | 0.0133 | 2026-10-29 | DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache | |
CVE-2026-43513 |
high | 7.5 | 0.0050 | 2026-10-29 | Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. Thi | |
CVE-2026-43514 |
low | 3.7 | 0.0035 | 2026-10-29 | Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. T | |
CVE-2026-43515 |
critical | 9.1 | 0.0122 | 2026-10-29 | Improper Authorization vulnerability when multiple method constraints define an HTTP metho | |
CVE-2025-65719 |
critical | 9.8 | 0.0058 | 2026-10-29 | An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary co | |
CVE-2026-25431 |
medium | 5.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in WPMU DEV Hustle allows Exploiting Incorrectly Confi | |
CVE-2026-43989 |
high | 8.5 | 0.0015 | 2026-10-29 | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the u | |
CVE-2026-43990 |
high | 8.4 | 0.0015 | 2026-10-29 | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugi | |
CVE-2026-43991 |
high | 8.4 | 0.0017 | 2026-10-29 | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, subst | |
CVE-2026-43992 |
critical | 9.8 | 0.0022 | 2026-10-29 | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, every | |
CVE-2026-43993 |
high | 8.2 | 0.0023 | 2026-10-29 | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the W | |
CVE-2026-5089 |
high | 7.3 | 0.0040 | 2026-10-29 | YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 (sexagesi | |
CVE-2026-8407 |
medium | 4.3 | 0.0020 | 2026-10-29 | Missing authorization in the PAM module in Devolutions Server allows an authenticated user | |
CVE-2026-25088 |
high | 8.8 | 0.0026 | 2026-10-29 | An improper neutralization of special elements used in an sql command ('sql injection') vu | |
CVE-2026-25690 |
medium | 6.5 | 0.0024 | 2026-10-29 | An improper neutralization of argument delimiters in a command ('argument injection') vuln | |
CVE-2026-26083 |
critical | 9.8 | 0.0073 | 2026-10-29 | A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiS | |
CVE-2026-29204 |
critical | 9.1 | 0.0032 | 2026-10-29 | Insufficient ownership check in `clientarea.php` allows an authenticated client area user | |
CVE-2026-32185 |
medium | 5.5 | 0.0047 | 2026-10-29 | Files or directories accessible to external parties in Microsoft Teams allows an unauthori | |
CVE-2026-32204 |
high | 7.8 | 0.0029 | 2026-10-29 | External control of file name or path in Azure Monitor Agent allows an authorized attacker | |
CVE-2026-33110 |
high | 8.8 | 0.0197 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-33112 |
high | 8.8 | 0.3112 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-33117 |
critical | 9.1 | 0.0048 | 2026-10-29 | The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local c | |
CVE-2026-33821 |
critical | 9.9 | 0.0066 | 2026-10-29 | Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an author | |
CVE-2026-33833 |
high | 8.2 | 0.0050 | 2026-10-29 | Improper neutralization of special elements in output used by a downstream component ('inj | |
CVE-2026-34332 |
high | 8.0 | 0.0051 | 2026-10-29 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute cod | |
CVE-2026-34350 |
medium | 6.5 | 0.0078 | 2026-10-29 | Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attack | |
CVE-2026-34636 |
high | 7.8 | 0.0015 | 2026-10-29 | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vu | |
CVE-2026-34637 |
high | 7.8 | 0.0015 | 2026-10-29 | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vu | |
CVE-2026-34638 |
high | 7.8 | 0.0018 | 2026-10-29 | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerab | |
CVE-2026-34639 |
high | 7.8 | 0.0015 | 2026-10-29 | Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write v | |
CVE-2026-34640 |
high | 7.8 | 0.0017 | 2026-10-29 | Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an Integer Overflow or W | |
CVE-2026-34642 |
high | 7.8 | 0.0019 | 2026-10-29 | After Effects versions 26.0, 25.6.4 and earlier are affected by a Heap-based Buffer Overfl | |
CVE-2026-34643 |
high | 7.8 | 0.0015 | 2026-10-29 | After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vul | |
CVE-2026-34644 |
high | 7.8 | 0.0017 | 2026-10-29 | After Effects versions 26.0, 25.6.4 and earlier are affected by an Integer Overflow or Wra | |
CVE-2026-34661 |
high | 7.8 | 0.0017 | 2026-10-29 | Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds write vulne | |
CVE-2026-34662 |
— | — | 0.0016 | 2026-10-29 | Illustrator versions 29.8.6, 30.3 and earlier are affected by a NULL Pointer Dereference v | |
CVE-2026-34663 |
medium | 5.5 | 0.0017 | 2026-10-29 | Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds read vulner | |
CVE-2026-34675 |
high | 7.8 | 0.0014 | 2026-10-29 | Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write v |