Browse All CVEs
33,202 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-43680 |
high | 7.2 | 0.0046 | 2026-10-29 | A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin | |
CVE-2026-43685 |
high | 7.2 | 0.0046 | 2026-10-29 | A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin | |
CVE-2026-44341 |
medium | 5.3 | 0.0029 | 2026-10-29 | GoJobs is a REST API for a Job Board platform. The application exposes a job retrieval end | |
CVE-2026-44347 |
medium | 6.5 | 0.0013 | 2026-10-29 | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.23.3, t | |
CVE-2026-44352 |
medium | 5.3 | 0.0026 | 2026-10-29 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investi | |
CVE-2026-44547 |
critical | 9.6 | 0.0026 | 2026-10-29 | ChurchCRM is an open-source church management system. From 7.2.0 to 7.2.2, The fix for CVE | |
CVE-2026-44548 |
high | 8.1 | 0.0014 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level cross-site | |
CVE-2026-8108 |
high | 7.8 | 0.0015 | 2026-10-29 | The installation of Fuji Tellus adds a driver to the kernel which grants all users read an | |
CVE-2024-36315 |
medium | 5.7 | 0.0014 | 2026-10-29 | Improper enforcement of the LFENCE serialization property may allow an attacker to bypass | |
CVE-2026-6888 |
high | 7.2 | 0.0037 | 2026-10-29 | Successful exploitation of the SQL injection vulnerability could allow a remote authentica | |
CVE-2026-8053 |
high | 8.7 | 0.0066 | 2026-10-29 | An issue in MongoDB Server's time-series collection implementation allows an authenticated | |
CVE-2026-8199 |
high | 7.1 | 0.0026 | 2026-10-29 | An authenticated user can cause excess memory usage via bitwise match expression AST proce | |
CVE-2026-8200 |
medium | 4.8 | 0.0020 | 2026-10-29 | When schema validation is enabled on a collection and an update or insert would violate th | |
CVE-2026-8201 |
medium | 6.1 | 0.0013 | 2026-10-29 | A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query anal | |
CVE-2026-8202 |
medium | 5.3 | 0.0026 | 2026-10-29 | Using a densely populated chars mask and a large input string in the MongoDB aggregation o | |
CVE-2026-8336 |
high | 7.7 | 0.0026 | 2026-10-29 | After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapre | |
CVE-2026-21015 |
medium | 6.8 | 0.0009 | 2026-10-29 | Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows loca | |
CVE-2026-21016 |
medium | 5.1 | 0.0009 | 2026-10-29 | Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows l | |
CVE-2026-21018 |
medium | 6.8 | 0.0015 | 2026-10-29 | Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged | |
CVE-2026-21019 |
high | 8.6 | 0.0016 | 2026-10-29 | Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 | |
CVE-2026-21020 |
medium | 5.1 | 0.0009 | 2026-10-29 | Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 | |
CVE-2026-21021 |
medium | 5.1 | 0.0021 | 2026-10-29 | Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical atta | |
CVE-2026-21022 |
medium | 6.9 | 0.0009 | 2026-10-29 | Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 | |
CVE-2026-21024 |
medium | 6.3 | 0.0009 | 2026-10-29 | Improper privilege management in Samsung System Support Service prior to version 8.0.8.0 a | |
CVE-2026-32661 |
critical | 9.3 | 0.0047 | 2026-10-29 | Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWAL | |
CVE-2026-44612 |
high | 8.4 | 0.0012 | 2026-10-29 | Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads | |
CVE-2026-25705 |
high | 8.4 | 0.0037 | 2026-10-29 | A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs. | |
CVE-2026-41050 |
critical | 9.9 | 0.0039 | 2026-10-29 | Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, | |
CVE-2024-47091 |
medium | 5.2 | 0.0012 | 2026-10-29 | Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p | |
CVE-2026-25710 |
high | 7.0 | 0.0013 | 2026-10-29 | The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffe | |
CVE-2026-41051 |
medium | 5.1 | 0.0008 | 2026-10-29 | csync2 uses insecure temporary directories when compiled with C99 or later, allowing for T | |
CVE-2026-44931 |
medium | 5.1 | 0.0015 | 2026-10-29 | The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/ma | |
CVE-2026-25107 |
medium | 6.9 | 0.0012 | 2026-10-29 | ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating | |
CVE-2026-35506 |
high | 8.6 | 0.0131 | 2026-10-29 | ELECOM wireless LAN access point devices contain an OS command injection vulnerability in | |
CVE-2026-40621 |
critical | 9.3 | 0.0049 | 2026-10-29 | ELECOM wireless LAN access point devices do not require authentication to access some spec | |
CVE-2026-42062 |
critical | 9.3 | 0.0163 | 2026-10-29 | ELECOM wireless LAN access point devices contain an OS command injection in processing of | |
CVE-2026-42948 |
medium | 4.8 | 0.0016 | 2026-10-29 | Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devic | |
CVE-2026-42950 |
medium | 5.1 | 0.0021 | 2026-10-29 | ELECOM wireless LAN access point devices do not check if language parameter has an appropr | |
CVE-2026-42961 |
medium | 5.1 | 0.0019 | 2026-10-29 | ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with ina | |
CVE-2026-39803 |
high | 8.7 | 0.0064 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allow | |
CVE-2026-39806 |
high | 8.7 | 0.0064 | 2026-10-29 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in mtrudel bandit all | |
CVE-2026-8463 |
medium | 5.3 | 0.0033 | 2026-10-29 | Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read | |
CVE-2024-51394 |
medium | 5.5 | 0.0010 | 2026-10-29 | Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37 | |
CVE-2024-51395 |
medium | 6.2 | 0.0011 | 2026-10-29 | Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37 | |
CVE-2024-55045 |
high | 7.3 | 0.0027 | 2026-10-29 | Firmament-Autopilot FMT-Firmware commit de5aec was discovered to contain a buffer overflow | |
CVE-2025-28343 |
high | 7.5 | 0.0038 | 2026-10-29 | striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function ThreadReadBut | |
CVE-2025-28344 |
high | 7.5 | 0.0033 | 2026-10-29 | striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function AuxJack. | |
CVE-2025-29338 |
medium | 5.6 | 0.0018 | 2026-10-29 | NXP moal.ko Wi-Fi driver 5.1.7.10 FW version from v17.92.1.p149.43 To v17.92.1.p149.157 wa | |
CVE-2026-20916 |
high | 7.2 | 0.0037 | 2026-10-29 | An authenticated iControl REST user with low privileges can create or modify arbitrary fil | |
CVE-2026-24464 |
medium | 6.9 | 0.0089 | 2026-10-29 | When running in Appliance mode, a directory traversal vulnerability exists in an undisclos |