Browse All CVEs
33,082 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-21785 |
medium | 4.0 | 0.0015 | 2026-10-29 | A misconfigured Content Security Policy (CSP) in HCL BigFix Remote Control Server WebUI (v | |
CVE-2026-44709 |
high | 7.8 | 0.0015 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-44710 |
medium | 4.6 | 0.0018 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-44711 |
high | 7.9 | 0.0024 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-44712 |
high | 8.2 | 0.0015 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-44713 |
high | 8.8 | 0.0016 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-45137 |
high | 8.2 | 0.0028 | 2026-10-29 | Anchor is a framework providing several convenient developer tools for writing Solana prog | |
CVE-2026-47269 |
high | 7.4 | 0.0031 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-47270 |
medium | 6.3 | 0.0011 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-44720 |
medium | 6.9 | 0.0021 | 2026-10-29 | OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0 | |
CVE-2026-45083 |
critical | 9.8 | 0.0041 | 2026-10-29 | The Goobi viewer is a web application that allows digitised material to be displayed in a | |
CVE-2026-45152 |
high | 7.8 | 0.0083 | 2026-10-29 | uniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a comm | |
CVE-2026-9208 |
high | 8.8 | 0.0042 | 2026-10-29 | Tanium addressed an unauthorized code execution vulnerability in Connect. | |
CVE-2026-45322 |
high | 7.8 | 0.0245 | 2026-10-29 | Microsoft UFO open-source framework for intelligent automation across devices and platform | |
CVE-2026-46402 |
high | 8.1 | 0.0075 | 2026-10-29 | Microsoft UFO open-source framework for intelligent automation across devices and platform | |
CVE-2026-46414 |
high | 8.8 | 0.0059 | 2026-10-29 | Microsoft UFO open-source framework for intelligent automation across devices and platform | |
CVE-2026-46416 |
medium | 6.3 | 0.0032 | 2026-10-29 | Microsoft UFO open-source framework for intelligent automation across devices and platform | |
CVE-2026-46538 |
medium | 5.9 | 0.0022 | 2026-10-29 | Microsoft UFO open-source framework for intelligent automation across devices and platform | |
CVE-2026-46544 |
medium | 5.3 | 0.0046 | 2026-10-29 | Microsoft UFO open-source framework for intelligent automation across devices and platform | |
CVE-2026-9739 |
critical | 9.4 | 0.0028 | 2026-10-29 | Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta p | |
CVE-2026-8915 |
high | 8.8 | 0.0034 | 2026-10-29 | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. | |
CVE-2026-9789 |
high | 8.5 | 0.0015 | 2026-10-29 | A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions | |
CVE-2026-32995 |
high | 7.5 | 0.0028 | 2026-10-29 | The Rocket.Chat DDP method autoTranslate.translateMessage in versions <8.5.0, <8.4.2, <8.3 | |
CVE-2026-32996 |
high | 7.3 | 0.0017 | 2026-10-29 | This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalat | |
CVE-2026-32997 |
high | 8.6 | 0.0051 | 2026-10-29 | A vulnerability allowing an authenticated user with the Backup Administrator role to write | |
CVE-2026-32998 |
critical | 9.4 | 0.0052 | 2026-10-29 | This vulnerability in Veeam Service Provider Console allows for remote code execution. | |
CVE-2026-32999 |
critical | 9.0 | 0.0031 | 2026-10-29 | Insufficient character filtering in backup agent signing module on Comet Backup server all | |
CVE-2026-9791 |
medium | 4.3 | 0.0022 | 2026-10-29 | A flaw was found in Keycloak. An authenticated user with existing organization membership | |
CVE-2026-9792 |
medium | 6.5 | 0.0027 | 2026-10-29 | A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.prot | |
CVE-2026-9793 |
high | 7.5 | 0.0016 | 2026-10-29 | A flaw was found in Keycloak. When a JSON Web Encryption (JWE) encrypted request object is | |
CVE-2026-9794 |
medium | 5.3 | 0.0044 | 2026-10-29 | A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerab | |
CVE-2026-9795 |
— | — | 0.0035 | 2026-10-29 | A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. An adminis | |
CVE-2026-9796 |
medium | 6.5 | 0.0022 | 2026-10-29 | A flaw was found in Keycloak. An authenticated administrator with the `manage-clients` rol | |
CVE-2026-9798 |
medium | 4.3 | 0.0037 | 2026-10-29 | A flaw was found in Keycloak, an open-source identity and access management solution. When | |
CVE-2026-9801 |
medium | 4.9 | 0.0048 | 2026-10-29 | A flaw was found in Keycloak. A remote attacker with high privileges, such as a realm admi | |
CVE-2026-9802 |
medium | 6.8 | 0.0030 | 2026-10-29 | A flaw was found in Keycloak. When revokeRefreshToken=true is enabled and persistent sessi | |
CVE-2026-9803 |
medium | 5.3 | 0.0042 | 2026-10-29 | A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated | |
CVE-2026-44604 |
high | 7.0 | 0.0057 | 2026-10-29 | A command injection vulnerability was discovered in the `rpmuncompress` utility of RPM. Wh | |
CVE-2026-9806 |
medium | 6.3 | 0.0026 | 2026-10-29 | A stored cross-site scripting (XSS) vulnerability exists in the notification panel of CTI | |
CVE-2026-4408 |
critical | 9.8 | 0.0250 | 2026-10-29 | A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file | |
CVE-2026-9804 |
— | — | 0.0052 | 2026-10-29 | A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific name | |
CVE-2026-47074 |
high | 8.7 | 0.0023 | 2026-10-29 | Improper Certificate Validation vulnerability in ex-aws ex_aws_sns (ExAws.SNS, ExAws.SNS.P | |
CVE-2026-4377 |
medium | 6.0 | 0.0014 | 2026-10-29 | Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does | |
CVE-2026-9658 |
high | 7.3 | 0.0023 | 2026-10-29 | Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header i | |
CVE-2026-8979 |
critical | 9.3 | 0.0078 | 2026-10-29 | The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication | |
CVE-2026-8980 |
critical | 9.3 | 0.0052 | 2026-10-29 | The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalat | |
CVE-2026-8990 |
medium | 5.3 | 0.0021 | 2026-10-29 | A user with physical access to a smartphone can bypass authentication mechanism of Kidsvie | |
CVE-2026-9828 |
low | 2.9 | 0.0037 | 2026-10-29 | Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (Harde | |
CVE-2026-35671 |
high | 8.7 | 0.0038 | 2026-10-29 | phpMyFAQ before 4.1.3 contains an insecure direct object reference vulnerability in the ad | |
CVE-2026-35672 |
high | 8.7 | 0.0048 | 2026-10-29 | phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in API v4.0 where th |