Browse All CVEs
33,079 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-45744 |
critical | 9.9 | 0.0201 | 2026-10-29 | Termix is a web-based server management platform with SSH terminal, tunneling, and file ed | |
CVE-2026-45745 |
high | 8.0 | 0.0017 | 2026-10-29 | Termix is a web-based server management platform with SSH terminal, tunneling, and file ed | |
CVE-2026-45746 |
critical | 9.0 | 0.0039 | 2026-10-29 | Termix is a web-based server management platform with SSH terminal, tunneling, and file ed | |
CVE-2026-45748 |
critical | 9.8 | 0.0173 | 2026-10-29 | Termix is a web-based server management platform with SSH terminal, tunneling, and file ed | |
CVE-2026-45749 |
high | 8.1 | 0.0032 | 2026-10-29 | Termix is a web-based server management platform with SSH terminal, tunneling, and file ed | |
CVE-2026-45750 |
critical | 9.0 | 0.0029 | 2026-10-29 | Termix is a web-based server management platform with SSH terminal, tunneling, and file ed | |
CVE-2026-49492 |
high | 8.6 | 0.0034 | 2026-10-29 | Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview th | |
CVE-2026-49493 |
high | 8.6 | 0.0033 | 2026-10-29 | Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJ | |
CVE-2026-50733 |
high | 8.6 | 0.0067 | 2026-10-29 | Markdown Preview Enhanced before 0.8.28 parses WaveDrom diagrams by evaluating untrusted m | |
CVE-2026-46389 |
critical | 9.8 | 0.0034 | 2026-10-29 | UDS Identity Config builds the Keycloak configuration image (realm, plugins, theme, trusts | |
CVE-2026-46390 |
medium | 6.9 | 0.0034 | 2026-10-29 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 2 | |
CVE-2026-46391 |
high | 8.7 | 0.0046 | 2026-10-29 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 9 | |
CVE-2026-46392 |
high | 8.7 | 0.0027 | 2026-10-29 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0 | |
CVE-2026-46394 |
high | 7.7 | 0.0077 | 2026-10-29 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0 | |
CVE-2026-46395 |
critical | 9.3 | 0.0029 | 2026-10-29 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0 | |
CVE-2026-11400 |
high | 8.6 | 0.0050 | 2026-10-29 | An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrappe | |
CVE-2026-11401 |
high | 8.6 | 0.0031 | 2026-10-29 | An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced Go Wrapper | |
CVE-2026-11414 |
critical | 10.0 | 0.0048 | 2026-10-29 | A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download U | |
CVE-2026-7186 |
high | 8.5 | 0.0014 | 2026-10-29 | Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2 | |
CVE-2026-7765 |
medium | 6.3 | 0.0019 | 2026-10-29 | Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes t | |
CVE-2026-8078 |
medium | 4.8 | 0.0014 | 2026-10-29 | Stored cross-site scripting in the global settings change log in Checkmk <2.5.0p5, <2.4.0p | |
CVE-2026-8833 |
high | 8.5 | 0.0014 | 2026-10-29 | Improper neutralization of HTML-encoded characters in the URL validation function in Check | |
CVE-2026-9549 |
medium | 4.8 | 0.0014 | 2026-10-29 | Stored cross-site scripting in the service discovery active check output in Checkmk <2.5.0 | |
CVE-2026-24349 |
high | 8.2 | 0.0006 | 2026-10-29 | A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions) | |
CVE-2026-46746 |
high | 8.7 | 0.0043 | 2026-10-29 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The a | |
CVE-2026-46747 |
medium | 5.3 | 0.0024 | 2026-10-29 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The a | |
CVE-2026-46748 |
high | 8.7 | 0.0021 | 2026-10-29 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The a | |
CVE-2026-46749 |
medium | 5.0 | 0.0012 | 2026-10-29 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The a | |
CVE-2026-11852 |
medium | 6.5 | 0.0020 | 2026-10-29 | Debusine is an integrated solution to build, distribute and maintain a Debian-based distri | |
CVE-2026-11853 |
medium | 6.5 | 0.0027 | 2026-10-29 | Debusine is an integrated solution to build, distribute and maintain a Debian-based distri | |
CVE-2026-11859 |
low | 2.0 | 0.0026 | 2026-10-29 | An HTML injection vulnerability in the "fetch links" email sent by Thinkst Applied Researc | |
CVE-2026-24066 |
high | 8.4 | 0.0012 | 2026-10-29 | Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital | |
CVE-2026-24067 |
high | 8.4 | 0.0018 | 2026-10-29 | Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital | |
CVE-2026-49069 |
high | 7.1 | 0.0117 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-49495 |
medium | 6.7 | 0.0015 | 2026-10-29 | Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in Exp | |
CVE-2026-49496 |
medium | 6.9 | 0.0017 | 2026-10-29 | Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generate | |
CVE-2026-49497 |
medium | 4.6 | 0.0019 | 2026-10-29 | Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider tha | |
CVE-2026-49498 |
high | 8.7 | 0.0026 | 2026-10-29 | Ghidra 11.0 before 12.1 contains a SQL injection vulnerability in the changePassword() met | |
CVE-2026-52750 |
high | 8.4 | 0.0050 | 2026-10-29 | Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling o | |
CVE-2026-52751 |
high | 8.6 | 0.0071 | 2026-10-29 | Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared- | |
CVE-2026-52752 |
high | 8.4 | 0.0022 | 2026-10-29 | Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer th | |
CVE-2026-52753 |
medium | 6.7 | 0.0015 | 2026-10-29 | Ghidra before 12.0.3 contains an out-of-memory vulnerability in the rust_demangle function | |
CVE-2026-52754 |
high | 8.7 | 0.0025 | 2026-10-29 | Ghidra before 12.1 contains an authentication bypass vulnerability in PKIAuthenticationMod | |
CVE-2026-52755 |
high | 8.4 | 0.0022 | 2026-10-29 | Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functiona | |
CVE-2026-52756 |
medium | 6.3 | 0.0046 | 2026-10-29 | Ghidra before 12.2 contains an unauthenticated path traversal vulnerability in the IsfServ | |
CVE-2026-52757 |
medium | 4.6 | 0.0014 | 2026-10-29 | Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVa | |
CVE-2026-52758 |
high | 8.7 | 0.0031 | 2026-10-29 | Ghidra before 12.1 contains a SQL injection vulnerability in BSim filter types that concat | |
CVE-2026-53435 |
— | — | 0.5313 | 2026-10-29 | In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to hav | |
CVE-2026-53436 |
medium | 4.3 | 0.0028 | 2026-10-29 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect U | |
CVE-2026-53437 |
— | — | 0.0047 | 2026-10-29 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect U |