Browse All CVEs
33,189 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-6282 |
high | 8.6 | 0.0039 | 2026-10-29 | A potential improper file path validation vulnerability was reported in some Lenovo Person | |
CVE-2026-8367 |
medium | 5.3 | 0.0013 | 2026-10-29 | aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attack | |
CVE-2024-48519 |
medium | 6.2 | 0.0011 | 2026-10-29 | Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081 | |
CVE-2026-2695 |
medium | 6.3 | 0.0020 | 2026-10-29 | A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (f | |
CVE-2026-44573 |
— | — | 0.0080 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 12.2.0 to befo | |
CVE-2026-44574 |
— | — | 0.0064 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 15.4.0 to befo | |
CVE-2026-44575 |
— | — | 0.0159 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 15.2.0 to befo | |
CVE-2026-44576 |
medium | 5.4 | 0.0029 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 14.2.0 to befo | |
CVE-2026-44577 |
— | — | 0.0074 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 10.0.0 to befo | |
CVE-2026-0237 |
high | 7.3 | 0.0015 | 2026-10-29 | An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Brows | |
CVE-2026-0263 |
high | 7.2 | 0.0037 | 2026-10-29 | A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® soft | |
CVE-2026-0264 |
high | 7.2 | 0.0047 | 2026-10-29 | A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Netw | |
CVE-2026-0265 |
high | 7.2 | 0.0105 | 2026-10-29 | An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an u | |
CVE-2026-43997 |
— | — | 0.0098 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, it is possible to obtain th | |
CVE-2026-43998 |
— | — | 0.0072 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. In 3.10.5, NodeVM's require.root path restri | |
CVE-2026-43999 |
— | — | 0.0097 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, NodeVM's builtin allowlist | |
CVE-2026-44000 |
high | 7.2 | 0.0020 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, a sandbox boundary violatio | |
CVE-2026-44001 |
— | — | 0.0045 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, a sandbox escape vulnerabil | |
CVE-2026-44002 |
medium | 5.8 | 0.0024 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's CallSite wrapper clas | |
CVE-2026-44003 |
medium | 5.8 | 0.0025 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's code transformer has | |
CVE-2026-44004 |
— | — | 0.0042 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, sandboxed code can call Buf | |
CVE-2026-44005 |
— | — | 0.0083 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes m | |
CVE-2026-44006 |
— | — | 0.0081 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach Bas | |
CVE-2026-44007 |
— | — | 0.0096 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created wi | |
CVE-2026-44008 |
— | — | 0.0085 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeAr | |
CVE-2026-44009 |
— | — | 0.0081 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, This vulnerability is fixe | |
CVE-2026-44578 |
— | — | 0.3554 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 13.4.13 to bef | |
CVE-2026-44579 |
— | — | 0.0075 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From to before 15. | |
CVE-2026-44580 |
medium | 6.1 | 0.0021 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 13.0.0 to befo | |
CVE-2026-44581 |
medium | 4.7 | 0.0022 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 13.4.0 to befo | |
CVE-2026-44582 |
low | 3.7 | 0.0022 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 13.4.6 to befo | |
CVE-2026-45109 |
— | — | 0.0060 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 15.2.0 to befo | |
CVE-2026-45411 |
— | — | 0.0057 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.3, it is possible to catch a h | |
CVE-2026-0235 |
medium | 5.8 | 0.0011 | 2026-10-29 | A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally aut | |
CVE-2026-0236 |
high | 7.3 | 0.0016 | 2026-10-29 | A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to pro | |
CVE-2026-0238 |
low | 1.1 | 0.0010 | 2026-10-29 | A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to i | |
CVE-2026-0239 |
medium | 4.9 | 0.0017 | 2026-10-29 | An information disclosure vulnerability in the Chronosphere Chronocollector enables an una | |
CVE-2026-0240 |
medium | 4.5 | 0.0024 | 2026-10-29 | An information disclosure vulnerability in Trust Protection Foundation enables an authenti | |
CVE-2026-0241 |
medium | 5.1 | 0.0034 | 2026-10-29 | Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to | |
CVE-2026-0242 |
medium | 6.1 | 0.0025 | 2026-10-29 | A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attac | |
CVE-2026-0244 |
medium | 5.2 | 0.0022 | 2026-10-29 | An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN I | |
CVE-2026-0245 |
medium | 4.3 | 0.0014 | 2026-10-29 | Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user | |
CVE-2026-0246 |
medium | 5.9 | 0.0015 | 2026-10-29 | A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Acc | |
CVE-2026-0247 |
medium | 5.9 | 0.0015 | 2026-10-29 | Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Acce | |
CVE-2026-0248 |
medium | 6.2 | 0.0019 | 2026-10-29 | An improper certificate validation vulnerability in the Prisma Access Agent® for Android a | |
CVE-2026-0249 |
medium | 4.9 | 0.0011 | 2026-10-29 | Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalP | |
CVE-2026-0250 |
medium | 5.2 | 0.0039 | 2026-10-29 | A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that e | |
CVE-2026-0251 |
medium | 5.9 | 0.0019 | 2026-10-29 | Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtec | |
CVE-2026-0256 |
medium | 4.4 | 0.0016 | 2026-10-29 | A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software e | |
CVE-2026-0257 |
high | 7.8 | 0.9501 | 2026-10-29 | KEV | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows atta |