Browse All CVEs
33,146 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42509 |
medium | 6.1 | 0.0036 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-43646 |
high | 7.5 | 0.0039 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Wicket. | |
CVE-2026-43975 |
medium | 6.5 | 0.0073 | 2026-10-29 | FolderUploadsFileManager in Apache Wicket does not validate or sanitize the uploadFieldId | |
CVE-2026-6860 |
medium | 6.9 | 0.0024 | 2026-10-29 | A TCP client can perform a TLS handshake and present the server name extension with a serv | |
CVE-2026-6420 |
medium | 6.3 | 0.0012 | 2026-10-29 | A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine | |
CVE-2026-40562 |
high | 7.5 | 0.0032 | 2026-10-29 | Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header P | |
CVE-2026-5081 |
— | — | 0.0030 | 2026-10-29 | Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session id | |
CVE-2026-8026 |
medium | 6.3 | 0.0026 | 2026-10-29 | A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the fun | |
CVE-2026-41287 |
high | 7.1 | 0.0025 | 2026-10-29 | Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Win | |
CVE-2026-8027 |
medium | 5.3 | 0.0029 | 2026-10-29 | A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnera | |
CVE-2026-8028 |
low | 2.9 | 0.0040 | 2026-10-29 | A vulnerability was detected in FlowiseAI Flowise up to 3.0.12. This affects the function | |
CVE-2026-41286 |
high | 7.1 | 0.0025 | 2026-10-29 | Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Win | |
CVE-2026-41288 |
high | 7.3 | 0.0011 | 2026-10-29 | Incorrect permission assignment for a resource in the patch management component of the Wa | |
CVE-2026-6691 |
high | 8.6 | 0.0013 | 2026-10-29 | The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during userna | |
CVE-2026-6787 |
high | 8.5 | 0.0011 | 2026-10-29 | Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows In | |
CVE-2026-6788 |
high | 8.5 | 0.0013 | 2026-10-29 | Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using | |
CVE-2026-6863 |
medium | 6.8 | 0.0024 | 2026-10-29 | Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in | |
CVE-2026-20034 |
high | 8.8 | 0.0071 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco Unity Connection could allo | |
CVE-2026-20035 |
high | 7.2 | 0.0030 | 2026-10-29 | A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthent | |
CVE-2026-20167 |
high | 7.7 | 0.0027 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director | |
CVE-2026-20168 |
medium | 6.5 | 0.0027 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director | |
CVE-2026-20169 |
medium | 6.4 | 0.0021 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director | |
CVE-2026-20172 |
medium | 4.3 | 0.0013 | 2026-10-29 | A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could a | |
CVE-2026-20185 |
high | 7.7 | 0.0039 | 2026-10-29 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 3 | |
CVE-2026-20188 |
none | — | 0.0031 | 2026-10-29 | Following the initial publication of the Security Advisory about a denial of service (DoS) | |
CVE-2026-20189 |
medium | 4.3 | 0.0021 | 2026-10-29 | A vulnerability in the log file download functionality of Cisco Prime Infrastructure could | |
CVE-2026-20193 |
medium | 4.3 | 0.0022 | 2026-10-29 | A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authen | |
CVE-2026-20195 |
medium | 5.3 | 0.0027 | 2026-10-29 | A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthe | |
CVE-2026-20219 |
medium | 5.4 | 0.0017 | 2026-10-29 | A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote | |
CVE-2026-21661 |
high | 8.4 | 0.0011 | 2026-10-29 | An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows all | |
CVE-2026-23870 |
high | 7.5 | 0.0153 | 2026-10-29 | A denial of service vulnerability could be triggered by sending specially crafted HTTP req | |
CVE-2026-42503 |
high | 8.8 | 0.0021 | 2026-10-29 | gopls by default communicates via pipe. However, -port and -listen flags are supported as | |
CVE-2026-7875 |
critical | 9.3 | 0.0015 | 2026-10-29 | NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerabili | |
CVE-2026-33079 |
high | 8.7 | 0.0059 | 2026-10-29 | In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial | |
CVE-2026-0300 |
critical | 9.3 | 0.4171 | 2026-10-29 | KEV | Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Aut |
CVE-2026-41930 |
critical | 9.2 | 0.0035 | 2026-10-29 | Vvveb before version 1.0.8.2 contains a hard-coded credentials vulnerability in its docker | |
CVE-2026-41931 |
medium | 6.9 | 0.0032 | 2026-10-29 | Vvveb before version 1.0.8.2 contains an information disclosure vulnerability that allows | |
CVE-2026-41934 |
high | 8.7 | 0.0054 | 2026-10-29 | Vvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability | |
CVE-2026-41936 |
high | 8.6 | 0.0034 | 2026-10-29 | Vvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability | |
CVE-2026-41938 |
high | 8.7 | 0.0072 | 2026-10-29 | Vvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the med | |
CVE-2026-7896 |
high | 8.8 | 0.0028 | 2026-10-29 | Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacke | |
CVE-2026-7897 |
high | 7.5 | 0.0031 | 2026-10-29 | Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote a | |
CVE-2026-7898 |
high | 8.8 | 0.0031 | 2026-10-29 | Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a re | |
CVE-2026-7899 |
high | 8.8 | 0.0030 | 2026-10-29 | Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remot | |
CVE-2026-7900 |
high | 8.3 | 0.0024 | 2026-10-29 | Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote att | |
CVE-2026-7901 |
high | 8.8 | 0.0027 | 2026-10-29 | Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote at | |
CVE-2026-7902 |
high | 8.8 | 0.0034 | 2026-10-29 | Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote | |
CVE-2026-7903 |
high | 8.8 | 0.0022 | 2026-10-29 | Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed a | |
CVE-2026-7904 |
medium | 4.3 | 0.0019 | 2026-10-29 | Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attac | |
CVE-2026-7905 |
high | 8.3 | 0.0022 | 2026-10-29 | Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 1 |