Browse All CVEs
33,079 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-35277 |
high | 8.1 | 0.0027 | 2026-10-29 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are | |
CVE-2026-45627 |
high | 8.2 | 0.0019 | 2026-10-29 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prio | |
CVE-2026-41918 |
medium | 5.9 | 0.0019 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < | |
CVE-2025-60477 |
medium | 5.0 | 0.0011 | 2026-10-29 | A NULL pointer dereference in the gf_filter_pid_resolve_file_template_ex function (/filter | |
CVE-2026-21017 |
medium | 4.6 | 0.0009 | 2026-10-29 | Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 | |
CVE-2026-21025 |
medium | 6.9 | 0.0009 | 2026-10-29 | Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local a | |
CVE-2026-21026 |
medium | 6.4 | 0.0009 | 2026-10-29 | Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 | |
CVE-2026-21027 |
medium | 4.8 | 0.0008 | 2026-10-29 | Improper export of android application components in ImsSettings prior to SMR Jun-2026 Rel | |
CVE-2026-21028 |
medium | 5.1 | 0.0009 | 2026-10-29 | Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local at | |
CVE-2026-21029 |
medium | 6.8 | 0.0009 | 2026-10-29 | Improper export of android application components in Galaxy Editing Service prior to SMR J | |
CVE-2026-21030 |
medium | 6.4 | 0.0009 | 2026-10-29 | Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local | |
CVE-2026-21031 |
medium | 5.2 | 0.0009 | 2026-10-29 | Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker t | |
CVE-2026-21032 |
medium | 6.9 | 0.0009 | 2026-10-29 | Improper export of android application components in SmartHomeWidgetReceiver of Samsung As | |
CVE-2026-21033 |
medium | 6.9 | 0.0009 | 2026-10-29 | Improper export of android application components in ExpressHomeWidgetReceiver of Samsung | |
CVE-2026-21034 |
medium | 4.8 | 0.0008 | 2026-10-29 | Improper export of android application components in Samsung Auto prior to version 3.1.2.6 | |
CVE-2026-21035 |
medium | 6.5 | 0.0030 | 2026-10-29 | Improper input validation in Samsung Plus TV prior to version 1.0.28.6 allows remote attac | |
CVE-2026-21036 |
medium | 6.3 | 0.0009 | 2026-10-29 | Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attacke | |
CVE-2026-21037 |
medium | 6.9 | 0.0010 | 2026-10-29 | Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attack | |
CVE-2026-21038 |
medium | 5.9 | 0.0010 | 2026-10-29 | Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5 | |
CVE-2026-25657 |
high | 7.1 | 0.0016 | 2026-10-29 | Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of | |
CVE-2026-25658 |
high | 7.1 | 0.0016 | 2026-10-29 | Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of | |
CVE-2026-25659 |
high | 7.1 | 0.0016 | 2026-10-29 | Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of | |
CVE-2026-11329 |
low | 2.0 | 0.0008 | 2026-10-29 | A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is | |
CVE-2026-11330 |
low | 2.0 | 0.0008 | 2026-10-29 | A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element | |
CVE-2026-50230 |
medium | 5.1 | 0.0041 | 2026-10-29 | Lyrion Music Server 9.2.0 contains an unauthenticated reflected cross-site scripting vulne | |
CVE-2026-50231 |
medium | 5.1 | 0.0018 | 2026-10-29 | Lyrion Music Server 9.2.0 contains an unauthenticated stored cross-site scripting vulnerab | |
CVE-2026-50232 |
medium | 5.1 | 0.0024 | 2026-10-29 | Lyrion Music Server 9.2.0 contains a stored cross-site scripting vulnerability that allows | |
CVE-2026-50233 |
medium | 6.9 | 0.0029 | 2026-10-29 | Lyrion Music Server 9.2.0 contains an arbitrary directory listing vulnerability in its rea | |
CVE-2026-50234 |
high | 8.7 | 0.0078 | 2026-10-29 | Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthentica | |
CVE-2026-50235 |
medium | 5.1 | 0.0016 | 2026-10-29 | Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advan | |
CVE-2026-10879 |
critical | 9.8 | 0.0049 | 2026-10-29 | DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements wit | |
CVE-2026-11333 |
low | 2.1 | 0.0021 | 2026-10-29 | A security vulnerability has been detected in tittuvarghese CollegeManagementSystem 3e4763 | |
CVE-2026-11334 |
medium | 5.5 | 0.0028 | 2026-10-29 | A vulnerability was detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e0 | |
CVE-2026-11335 |
low | 2.1 | 0.0023 | 2026-10-29 | A flaw has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7 | |
CVE-2026-11336 |
low | 2.1 | 0.0021 | 2026-10-29 | A vulnerability has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049 | |
CVE-2026-11362 |
critical | 9.8 | 0.0045 | 2026-10-29 | DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. | |
CVE-2026-9270 |
critical | 9.1 | 0.0033 | 2026-10-29 | DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogSt | |
CVE-2026-11337 |
low | 2.1 | 0.0027 | 2026-10-29 | A vulnerability was found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f4 | |
CVE-2026-11338 |
low | 1.9 | 0.0026 | 2026-10-29 | A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation | |
CVE-2026-11339 |
low | 2.1 | 0.0313 | 2026-10-29 | A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the | |
CVE-2026-7473 |
medium | 6.9 | 0.0111 | 2026-10-29 | KEV | Arista Extensible Operating System (EOS) contains an incomplete comparison with missing fa |
CVE-2026-8714 |
high | 7.1 | 0.0021 | 2026-10-29 | A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520 | |
CVE-2026-11341 |
low | 2.1 | 0.0104 | 2026-10-29 | A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the functio | |
CVE-2026-11342 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. | |
CVE-2026-11344 |
medium | 5.5 | 0.0037 | 2026-10-29 | A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an | |
CVE-2026-2379 |
high | 8.2 | 0.0023 | 2026-10-29 | On affected platforms with hardware IPSec support running Arista EOS with certain IPsec fe | |
CVE-2026-45290 |
high | 7.5 | 0.0028 | 2026-10-29 | Cloudburst Network provides network components used within Cloudburst projects. A vulnerab | |
CVE-2026-45291 |
high | 7.5 | 0.0026 | 2026-10-29 | Cloudburst Network provides network components used within Cloudburst projects. A vulnerab | |
CVE-2026-45327 |
high | 8.2 | 0.0036 | 2026-10-29 | TinyIce is a streaming server for audio and video. In versions 0.8.95 through 2.4.1, missi | |
CVE-2026-45743 |
high | 8.1 | 0.0028 | 2026-10-29 | Termix is a web-based server management platform with SSH terminal, tunneling, and file ed |