Browse All CVEs
33,204 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42303 |
medium | 6.1 | 0.0031 | 2026-10-29 | Fides is an open-source privacy engineering platform. From 2.75.0 to before 2.83.2, Fides | |
CVE-2026-42348 |
high | 7.5 | 0.0031 | 2026-10-29 | OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alph | |
CVE-2026-42541 |
medium | 4.3 | 0.0017 | 2026-10-29 | Kubewarden is a policy engine for Kubernetes. Prior to , An attacker with privileged Admis | |
CVE-2026-42823 |
critical | 9.9 | 0.0060 | 2026-10-29 | Improper access control in Azure Logic Apps allows an authorized attacker to elevate privi | |
CVE-2026-42830 |
medium | 6.5 | 0.0047 | 2026-10-29 | Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate priv | |
CVE-2026-42831 |
high | 7.8 | 0.0044 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-42832 |
medium | 5.5 | 0.0022 | 2026-10-29 | Improper access control in Microsoft Office allows an unauthorized attacker to perform spo | |
CVE-2026-42833 |
critical | 9.1 | 0.0075 | 2026-10-29 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-pr | |
CVE-2026-42838 |
medium | 5.4 | 0.0024 | 2026-10-29 | Improper neutralization of special elements in output used by a downstream component ('inj | |
CVE-2026-42891 |
medium | 6.5 | 0.0029 | 2026-10-29 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium- | |
CVE-2026-42893 |
high | 7.5 | 0.0040 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in M36 | |
CVE-2026-42898 |
critical | 9.9 | 0.0119 | 2026-10-29 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-pr | |
CVE-2026-42899 |
— | — | 0.0243 | 2026-10-29 | Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthori | |
CVE-2026-43891 |
high | 7.5 | 0.0035 | 2026-10-29 | changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, | |
CVE-2026-43892 |
high | 8.8 | 0.0026 | 2026-10-29 | AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss | |
CVE-2026-43929 |
high | 8.2 | 0.0027 | 2026-10-29 | ssrfcheck is a library that checks if a string contains a potential SSRF attack. In 1.3.0 | |
CVE-2026-44196 |
critical | 9.1 | 0.0030 | 2026-10-29 | Pingvin Share X is a secure and easy self-hosted file sharing platform. From 1.14.1 to 1.1 | |
CVE-2026-44277 |
critical | 9.8 | 0.0055 | 2026-10-29 | A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthent | |
CVE-2026-44278 |
medium | 5.5 | 0.0010 | 2026-10-29 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 t | |
CVE-2026-44279 |
medium | 5.5 | 0.0010 | 2026-10-29 | An improper export of android application components vulnerability in Fortinet FortiTokenA | |
CVE-2026-5146 |
medium | 4.3 | 0.0016 | 2026-10-29 | Improper access control in the notification management endpoints in Devolutions Server all | |
CVE-2026-23819 |
high | 8.8 | 0.0027 | 2026-10-29 | A vulnerability in the web-based management interface of Access Points running AOS-10 and | |
CVE-2026-23820 |
high | 7.2 | 0.0056 | 2026-10-29 | A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 In | |
CVE-2026-23821 |
high | 7.2 | 0.0062 | 2026-10-29 | A vulnerability in the configuration processing logic of Access Points running AOS-10 coul | |
CVE-2026-23822 |
medium | 5.3 | 0.0026 | 2026-10-29 | A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauth | |
CVE-2026-23823 |
high | 7.2 | 0.0096 | 2026-10-29 | A vulnerability in the command line interface of Access Points running AOS-10 could allow | |
CVE-2026-34659 |
critical | 9.6 | 0.0063 | 2026-10-29 | Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization | |
CVE-2026-34660 |
critical | 9.3 | 0.0044 | 2026-10-29 | Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Auth | |
CVE-2026-34664 |
medium | 6.3 | 0.0018 | 2026-10-29 | Substance3D - Designer versions 15.1.0 and earlier are affected by an Improper Limitation | |
CVE-2026-34681 |
high | 7.8 | 0.0015 | 2026-10-29 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write | |
CVE-2026-34682 |
high | 7.8 | 0.0015 | 2026-10-29 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write | |
CVE-2026-34683 |
high | 7.8 | 0.0015 | 2026-10-29 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write | |
CVE-2026-34684 |
high | 7.8 | 0.0015 | 2026-10-29 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write | |
CVE-2026-8431 |
critical | 9.4 | 0.0037 | 2026-10-29 | An administrative user with access to configure webhooks can execute arbitrary commands by | |
CVE-2026-23824 |
high | 7.5 | 0.0033 | 2026-10-29 | Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Syste | |
CVE-2026-23825 |
high | 7.5 | 0.0033 | 2026-10-29 | Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Syste | |
CVE-2026-23826 |
high | 7.5 | 0.0040 | 2026-10-29 | A vulnerability in a network management service of AOS-8 Operating System could allow an u | |
CVE-2026-23827 |
high | 7.5 | 0.0053 | 2026-10-29 | A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 | |
CVE-2026-34645 |
high | 7.5 | 0.0056 | 2026-10-29 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a | |
CVE-2026-34646 |
high | 7.5 | 0.0041 | 2026-10-29 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a | |
CVE-2026-34647 |
high | 7.4 | 0.0065 | 2026-10-29 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a | |
CVE-2026-34648 |
high | 7.5 | 0.2138 | 2026-10-29 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a | |
CVE-2026-34649 |
high | 7.5 | 0.1361 | 2026-10-29 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a | |
CVE-2026-34650 |
high | 7.5 | 0.1508 | 2026-10-29 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a | |
CVE-2026-34651 |
high | 7.5 | 0.0067 | 2026-10-29 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a | |
CVE-2026-34652 |
high | 7.5 | 0.0051 | 2026-10-29 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a | |
CVE-2026-34653 |
high | 8.7 | 0.0061 | 2026-10-29 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a | |
CVE-2026-34654 |
medium | 5.3 | 0.0062 | 2026-10-29 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a | |
CVE-2026-34655 |
medium | 4.8 | 0.0037 | 2026-10-29 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a | |
CVE-2026-34656 |
medium | 4.3 | 0.0039 | 2026-10-29 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a |