Browse All CVEs
13,200 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-56171 |
high | 7.1 | 0.0066 | 2026-10-29 | Exposure of private personal information to an unauthorized actor in Windows RDP allows an | |
CVE-2026-42976 |
high | 7.8 | 0.0030 | 2026-10-29 | Missing authentication for critical function in Windows RPC API allows an authorized attac | |
CVE-2026-118008 |
high | 8.8 | 0.0035 | 2026-10-29 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Fir | |
CVE-2026-94346 |
high | 7.2 | 0.0053 | 2026-10-29 | PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LT | |
CVE-2026-94347 |
high | 7.2 | 0.0029 | 2026-10-29 | PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LT | |
CVE-2026-117604 |
high | 8.7 | 0.0031 | 2026-10-29 | Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebugge | |
CVE-2026-103593 |
high | 7.1 | 0.0010 | 2026-10-29 | A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a ne | |
CVE-2026-104189 |
high | 7.5 | 0.0035 | 2026-10-29 | The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud t | |
CVE-2026-107672 |
high | 8.8 | 0.0031 | 2026-10-29 | A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerabil | |
CVE-2026-111107 |
high | 8.7 | 0.0036 | 2026-10-29 | A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface | |
CVE-2026-111582 |
high | 7.3 | 0.0010 | 2026-10-29 | A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for W | |
CVE-2026-111583 |
high | 7.3 | 0.0019 | 2026-10-29 | Improper access control in the installer staging directory used by TeamViewer Full Client | |
CVE-2026-111584 |
high | 7.3 | 0.0011 | 2026-10-29 | A race condition in the installation process of TeamViewer Remote Management - Patch Manag | |
CVE-2026-111585 |
high | 8.8 | 0.0029 | 2026-10-29 | An integer overflow in the remote-control screen processing component of TeamViewer client | |
CVE-2026-90442 |
high | 8.6 | 0.0021 | 2026-10-29 | A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an aut | |
CVE-2026-90464 |
high | 7.2 | 0.0036 | 2026-10-29 | An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagno | |
CVE-2026-92372 |
high | 8.8 | 0.0043 | 2026-10-29 | An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client | |
CVE-2026-92374 |
high | 7.8 | 0.0009 | 2026-10-29 | A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link h | |
CVE-2026-92375 |
high | 7.8 | 0.0010 | 2026-10-29 | An improper access control vulnerability in the IPC communication between TeamViewer Full | |
CVE-2026-92376 |
high | 7.8 | 0.0013 | 2026-10-29 | Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer R | |
CVE-2026-92377 |
high | 7.8 | 0.0011 | 2026-10-29 | Improper access control in the Patch Management update mechanism of TeamViewer Full Client | |
CVE-2026-93434 |
high | 8.7 | 0.0046 | 2026-10-29 | An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process al | |
CVE-2026-93862 |
high | 7.2 | 0.0016 | 2026-10-29 | An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker | |
CVE-2026-93864 |
high | 7.1 | 0.0013 | 2026-10-29 | A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local | |
CVE-2026-102636 |
high | 7.1 | 0.0015 | 2026-10-29 | A maliciously crafted HTML payload in a design name, when displayed after another user ope | |
CVE-2026-102637 |
high | 7.1 | 0.0015 | 2026-10-29 | A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, | |
CVE-2026-102638 |
high | 7.1 | 0.0015 | 2026-10-29 | A maliciously crafted HTML payload in the description of an electronic library (.lbr) file | |
CVE-2026-104349 |
high | 7.3 | 0.0016 | 2026-10-29 | Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability th | |
CVE-2026-105477 |
high | 7.3 | 0.0013 | 2026-10-29 | A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only insta | |
CVE-2026-106077 |
high | 8.3 | 0.0023 | 2026-10-29 | A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role | |
CVE-2026-107671 |
high | 8.5 | 0.0035 | 2026-10-29 | A vulnerability allowing an attacker with valid Administrator credentials to bypass multi- | |
CVE-2026-109089 |
high | 7.5 | 0.0026 | 2026-10-29 | A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a h | |
CVE-2026-109090 |
high | 7.5 | 0.0026 | 2026-10-29 | A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply | |
CVE-2026-113775 |
high | 7.8 | 0.0014 | 2026-10-29 | A maliciously crafted dynamic library, when loaded from an arbitrary path through the Text | |
CVE-2026-114596 |
high | 8.8 | 0.0026 | 2026-10-29 | In EPICS Base release 7.0.10 and prior, an improper validation of message length values du | |
CVE-2026-114597 |
high | 8.7 | 0.0030 | 2026-10-29 | In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length va | |
CVE-2026-114598 |
high | 8.7 | 0.0030 | 2026-10-29 | In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length va | |
CVE-2026-116672 |
high | 8.8 | 0.0027 | 2026-10-29 | Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until | |
CVE-2026-116675 |
high | 8.5 | 0.0035 | 2026-10-29 | TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8. | |
CVE-2026-48379 |
high | 7.8 | 0.0019 | 2026-10-29 | Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that coul | |
CVE-2026-57197 |
high | 7.7 | 0.0053 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-57201 |
high | 7.5 | 0.0070 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-77167 |
high | 7.5 | 0.0032 | 2026-10-29 | Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_sha | |
CVE-2026-102814 |
high | 8.7 | 0.0036 | 2026-10-29 | An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP | |
CVE-2026-108303 |
high | 8.8 | 0.0025 | 2026-10-29 | Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. | |
CVE-2026-108304 |
high | 7.8 | 0.0012 | 2026-10-29 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | |
CVE-2026-108305 |
high | 7.8 | 0.0014 | 2026-10-29 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | |
CVE-2026-108306 |
high | 7.8 | 0.0014 | 2026-10-29 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | |
CVE-2026-108307 |
high | 7.8 | 0.0013 | 2026-10-29 | Tanium addressed a heap-based buffer overflow vulnerability in Index. | |
CVE-2026-108329 |
high | 8.8 | 0.0050 | 2026-10-29 | Tanium addressed an unauthorized code execution vulnerability in Threat Response. |