Browse All CVEs
32,802 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-6317 |
high | 8.8 | 0.0034 | 2026-10-29 | Use after free in Cast in Google Chrome prior to 147.0.7727.101 allowed a remote attacker | |
CVE-2026-6318 |
high | 8.8 | 0.0033 | 2026-10-29 | Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacke | |
CVE-2026-6319 |
high | 7.5 | 0.0029 | 2026-10-29 | Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a r | |
CVE-2026-6358 |
high | 8.8 | 0.0029 | 2026-10-29 | Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote | |
CVE-2026-6359 |
high | 8.8 | 0.0027 | 2026-10-29 | Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remo | |
CVE-2026-6360 |
high | 8.8 | 0.0025 | 2026-10-29 | Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote att | |
CVE-2026-6361 |
high | 8.3 | 0.0031 | 2026-10-29 | Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed | |
CVE-2026-6362 |
medium | 4.3 | 0.0022 | 2026-10-29 | Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacke | |
CVE-2026-6363 |
high | 8.8 | 0.0029 | 2026-10-29 | Type Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to | |
CVE-2026-6364 |
medium | 6.5 | 0.0025 | 2026-10-29 | Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attac | |
CVE-2026-6384 |
high | 7.8 | 0.0026 | 2026-10-29 | A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading comp | |
CVE-2026-6385 |
medium | 6.5 | 0.0044 | 2026-10-29 | A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providin | |
CVE-2026-22676 |
high | 8.5 | 0.0010 | 2026-10-29 | Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that | |
CVE-2026-40186 |
medium | 6.1 | 0.0025 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. A regression introduced | |
CVE-2026-1564 |
medium | 5.1 | 0.0019 | 2026-10-29 | Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerabilit | |
CVE-2026-1711 |
medium | 4.8 | 0.0019 | 2026-10-29 | Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting | |
CVE-2026-6388 |
— | — | 0.0036 | 2026-10-29 | A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with perm | |
CVE-2026-40192 |
high | 8.7 | 0.0067 | 2026-10-29 | Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amoun | |
CVE-2026-40316 |
high | 8.8 | 0.0041 | 2026-10-29 | OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, | |
CVE-2026-40193 |
high | 8.2 | 0.0042 | 2026-10-29 | maddy is a composable, all-in-one mail server. Versions prior to 0.9.3 contain an LDAP inj | |
CVE-2026-40947 |
low | 2.9 | 0.0013 | 2026-10-29 | Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 | |
CVE-2026-5363 |
medium | 5.4 | 0.0009 | 2026-10-29 | Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modu | |
CVE-2026-40502 |
high | 8.7 | 0.0169 | 2026-10-29 | OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows | |
CVE-2026-40503 |
high | 7.1 | 0.0041 | 2026-10-29 | OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows re | |
CVE-2026-40504 |
critical | 9.3 | 0.0064 | 2026-10-29 | Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity | |
CVE-2026-40505 |
medium | 4.8 | 0.0017 | 2026-10-29 | MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers | |
CVE-2026-1880 |
medium | 5.4 | 0.0014 | 2026-10-29 | An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverH | |
CVE-2026-3428 |
medium | 5.4 | 0.0007 | 2026-10-29 | A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Mem | |
CVE-2026-41015 |
high | 7.4 | 0.0116 | 2026-10-29 | radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via | |
CVE-2026-6348 |
critical | 9.3 | 0.0018 | 2026-10-29 | WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability | |
CVE-2026-6349 |
critical | 9.3 | 0.0203 | 2026-10-29 | The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing una | |
CVE-2026-6350 |
critical | 9.3 | 0.0076 | 2026-10-29 | MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, | |
CVE-2026-6351 |
high | 8.7 | 0.0059 | 2026-10-29 | MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing una | |
CVE-2026-5070 |
medium | 6.4 | 0.0019 | 2026-10-29 | The Vantage theme for WordPress is vulnerable to Stored Cross-Site Scripting via Gallery b | |
CVE-2023-3634 |
high | 8.8 | 0.0064 | 2026-10-29 | In products of the MSE6 product-family by Festo a remote authenticated, low privileged att | |
CVE-2023-5872 |
medium | 4.3 | 0.0032 | 2026-10-29 | In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enume | |
CVE-2026-22615 |
high | 7.2 | 0.0034 | 2026-10-29 | Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML | |
CVE-2026-22616 |
high | 7.5 | 0.0032 | 2026-10-29 | Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts a | |
CVE-2026-40118 |
medium | 5.1 | 0.0018 | 2026-10-29 | UDP Console provided by Arcserve contains an incorrectly specified destination in a commun | |
CVE-2026-22617 |
high | 7.4 | 0.0017 | 2026-10-29 | Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could | |
CVE-2026-22618 |
high | 7.1 | 0.0023 | 2026-10-29 | A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), whe | |
CVE-2026-22619 |
critical | 9.9 | 0.0032 | 2026-10-29 | Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its exe | |
CVE-2026-3861 |
high | 7.1 | 0.0031 | 2026-10-29 | LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browse | |
CVE-2026-41030 |
medium | 6.2 | 0.0016 | 2026-10-29 | In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform | |
CVE-2026-41034 |
medium | 5.0 | 0.0029 | 2026-10-29 | ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS process | |
CVE-2026-41035 |
high | 7.8 | 0.0039 | 2026-10-29 | In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a q | |
CVE-2026-23772 |
high | 7.3 | 0.0012 | 2026-10-29 | Dell Storage Manager - Replay Manager for Microsoft Servers, version(s) 8.0, contain(s) an | |
CVE-2026-31843 |
critical | 10.0 | 0.0138 | 2026-10-29 | The goodoneuz/pay-uz Laravel package (<= 2.2.24) contains a critical vulnerability in the | |
CVE-2026-31987 |
high | 7.5 | 0.0074 | 2026-10-29 | JWT Tokens used by tasks were exposed in logs. This could allow UI users to act as Dag Aut | |
CVE-2026-5785 |
high | 8.1 | 0.0139 | 2026-10-29 | Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro ve |