Browse All CVEs
32,009 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-2449 |
critical | 9.0 | 0.0033 | 2026-10-29 | Improper neutralization of argument delimiters in a command ('argument injection') vulnera | |
CVE-2026-2450 |
high | 7.4 | 0.0027 | 2026-10-29 | .NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper I | |
CVE-2026-30480 |
medium | 6.5 | 0.0027 | 2026-10-29 | A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS | |
CVE-2026-37980 |
medium | 4.8 | 0.0036 | 2026-10-29 | A flaw was found in Keycloak, specifically in the organization selection login page. A rem | |
CVE-2026-4344 |
high | 7.1 | 0.0020 | 2026-10-29 | A maliciously crafted HTML payload in a component name, when displayed during the delete c | |
CVE-2026-4345 |
high | 7.1 | 0.0020 | 2026-10-29 | A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigg | |
CVE-2026-4369 |
high | 7.1 | 0.0020 | 2026-10-29 | A maliciously crafted HTML payload in an assembly variant name, when displayed during the | |
CVE-2026-4913 |
medium | 5.7 | 0.0059 | 2026-10-29 | Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a r | |
CVE-2026-4914 |
medium | 5.4 | 0.0034 | 2026-10-29 | Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker t | |
CVE-2025-65136 |
medium | 6.1 | 0.0018 | 2026-10-29 | In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /st | |
CVE-2026-21741 |
medium | 4.8 | 0.0021 | 2026-10-29 | An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerabili | |
CVE-2026-21742 |
medium | 6.5 | 0.0015 | 2026-10-29 | A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS | |
CVE-2026-22154 |
medium | 5.4 | 0.0022 | 2026-10-29 | An improper neutralization of input during web page generation ('cross-site scripting') vu | |
CVE-2026-22155 |
high | 7.5 | 0.0017 | 2026-10-29 | A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS | |
CVE-2026-22573 |
medium | 6.5 | 0.0042 | 2026-10-29 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerab | |
CVE-2026-22574 |
medium | 6.5 | 0.0027 | 2026-10-29 | A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 | |
CVE-2026-22576 |
medium | 6.5 | 0.0026 | 2026-10-29 | A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 | |
CVE-2026-22828 |
high | 8.1 | 0.0090 | 2026-10-29 | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7 | |
CVE-2026-23708 |
high | 8.1 | 0.0028 | 2026-10-29 | A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, Fo | |
CVE-2026-25691 |
medium | 6.7 | 0.0046 | 2026-10-29 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerabi | |
CVE-2026-27316 |
low | 2.7 | 0.0031 | 2026-10-29 | A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 throug | |
CVE-2026-2399 |
medium | 6.9 | 0.0020 | 2026-10-29 | CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vuln | |
CVE-2026-2400 |
medium | 5.3 | 0.0023 | 2026-10-29 | CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists t | |
CVE-2026-2401 |
low | 2.4 | 0.0010 | 2026-10-29 | CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could c | |
CVE-2026-2402 |
medium | 6.9 | 0.0027 | 2026-10-29 | CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists tha | |
CVE-2026-2403 |
medium | 5.3 | 0.0017 | 2026-10-29 | CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that coul | |
CVE-2026-2404 |
medium | 6.9 | 0.0019 | 2026-10-29 | CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log | |
CVE-2026-2405 |
medium | 5.3 | 0.0024 | 2026-10-29 | CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive | |
CVE-2026-39808 |
critical | 9.8 | 0.9319 | 2026-10-29 | KEV | Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an u |
CVE-2026-39809 |
medium | 6.7 | 0.0013 | 2026-10-29 | A improper neutralization of special elements used in an sql command ('sql injection') vul | |
CVE-2026-39810 |
medium | 5.5 | 0.0010 | 2026-10-29 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 throu | |
CVE-2026-39811 |
medium | 4.9 | 0.0037 | 2026-10-29 | A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, F | |
CVE-2026-39812 |
medium | 4.8 | 0.0019 | 2026-10-29 | A improper neutralization of input during web page generation ('cross-site scripting') vul | |
CVE-2026-39813 |
critical | 9.8 | 0.2222 | 2026-10-29 | A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, | |
CVE-2026-39814 |
medium | 6.7 | 0.0013 | 2026-10-29 | Multiple Relative Path Traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiW | |
CVE-2026-39815 |
high | 8.8 | 0.0036 | 2026-10-29 | A improper neutralization of special elements used in an sql command ('sql injection') vul | |
CVE-2026-4832 |
medium | 6.9 | 0.0027 | 2026-10-29 | CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized a | |
CVE-2026-5713 |
medium | 5.3 | 0.0013 | 2026-10-29 | The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3 | |
CVE-2026-22692 |
medium | 6.8 | 0.0040 | 2026-10-29 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.13 an | |
CVE-2026-27238 |
high | 7.8 | 0.0018 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Ove | |
CVE-2026-27283 |
high | 7.8 | 0.0016 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After Free vulner | |
CVE-2026-27284 |
high | 7.8 | 0.0016 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read v | |
CVE-2026-27285 |
medium | 5.5 | 0.0014 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Ove | |
CVE-2026-27286 |
medium | 5.5 | 0.0016 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Ove | |
CVE-2026-27291 |
high | 7.8 | 0.0014 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write | |
CVE-2026-34622 |
high | 8.6 | 0.0042 | 2026-10-29 | Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected | |
CVE-2026-34626 |
medium | 6.3 | 0.0034 | 2026-10-29 | Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected | |
CVE-2026-0207 |
high | 8.5 | 0.0038 | 2026-10-29 | A vulnerability exists in FlashBlade whereby sensitive information may be logged under spe | |
CVE-2026-0209 |
medium | 6.9 | 0.0038 | 2026-10-29 | Under certain administrative conditions, FlashArray Purity may apply snapshot retention po | |
CVE-2026-0390 |
medium | 6.7 | 0.0032 | 2026-10-29 | Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an autho |