Browse All CVEs
13,205 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-118343 |
high | 8.8 | 0.0026 | 2026-10-29 | Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a | |
CVE-2026-118344 |
high | 8.8 | 0.0034 | 2026-10-29 | Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker | |
CVE-2026-118345 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker | |
CVE-2026-118346 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote att | |
CVE-2026-118347 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote atta | |
CVE-2026-118348 |
high | 8.8 | 0.0034 | 2026-10-29 | Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote | |
CVE-2026-118349 |
high | 8.8 | 0.0026 | 2026-10-29 | Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote att | |
CVE-2026-118350 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attack | |
CVE-2026-118351 |
high | 8.8 | 0.0026 | 2026-10-29 | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacke | |
CVE-2026-118352 |
high | 8.8 | 0.0026 | 2026-10-29 | Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attack | |
CVE-2026-118353 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker | |
CVE-2026-118354 |
high | 8.8 | 0.0026 | 2026-10-29 | Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote | |
CVE-2026-118356 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to | |
CVE-2026-118357 |
high | 8.8 | 0.0028 | 2026-10-29 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote atta | |
CVE-2026-118358 |
high | 8.8 | 0.0036 | 2026-10-29 | Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote att | |
CVE-2026-118359 |
high | 8.8 | 0.0028 | 2026-10-29 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker | |
CVE-2026-58205 |
high | 8.1 | 0.0029 | 2026-10-29 | GRR is a resource management and reservation application. Prior to version 4.5.0, `maj.php | |
CVE-2026-58255 |
high | 8.8 | 0.0042 | 2026-10-29 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior | |
CVE-2026-58257 |
high | 7.2 | 0.0047 | 2026-10-29 | GRR is a resource management and reservation application. Prior to the advisory-reported f | |
CVE-2026-59158 |
high | 7.5 | 0.0050 | 2026-10-29 | Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications. Prio | |
CVE-2026-104016 |
high | 7.5 | 0.0068 | 2026-10-29 | ProtobufParser parses length-prefixed protobuf string and bytes fields by checking (_input | |
CVE-2026-104895 |
high | 7.5 | 0.0038 | 2026-10-29 | The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix | |
CVE-2026-110747 |
high | 7.5 | 0.0039 | 2026-10-29 | ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry's string k | |
CVE-2013-20007 |
high | 8.6 | 0.0200 | 2026-10-29 | Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows | |
CVE-2013-20008 |
high | 7.0 | 0.0025 | 2026-10-29 | Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows atta | |
CVE-2014-125136 |
high | 8.2 | 0.0041 | 2026-10-29 | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through | |
CVE-2014-125137 |
high | 7.1 | 0.0072 | 2026-10-29 | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through | |
CVE-2014-125138 |
high | 8.7 | 0.0042 | 2026-10-29 | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through | |
CVE-2015-20129 |
high | 8.6 | 0.0015 | 2026-10-29 | CrushFTP before 7.3.0 contains a cross-site request forgery vulnerability that allows atta | |
CVE-2026-109999 |
high | 7.2 | 0.0029 | 2026-10-29 | The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workf | |
CVE-2026-111314 |
high | 7.2 | 0.0024 | 2026-10-29 | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPr | |
CVE-2026-117607 |
high | 8.6 | 0.0068 | 2026-10-29 | Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that a | |
CVE-2026-117609 |
high | 7.1 | 0.0035 | 2026-10-29 | rtl_433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2_mc | |
CVE-2026-117610 |
high | 8.2 | 0.0043 | 2026-10-29 | libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntity | |
CVE-2026-118370 |
high | 8.2 | 0.0044 | 2026-10-29 | libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in | |
CVE-2026-118374 |
high | 8.2 | 0.0021 | 2026-10-29 | LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows ma | |
CVE-2026-118377 |
high | 8.7 | 0.0018 | 2026-10-29 | mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerab | |
CVE-2026-118378 |
high | 8.5 | 0.0015 | 2026-10-29 | Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that | |
CVE-2026-97019 |
high | 7.2 | 0.0024 | 2026-10-29 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cro | |
CVE-2026-111255 |
high | 7.5 | 0.0052 | 2026-10-29 | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPr | |
CVE-2026-116613 |
high | 7.5 | 0.0028 | 2026-10-29 | The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposu | |
CVE-2026-1928 |
high | 8.8 | 0.0054 | 2026-10-29 | The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerab | |
CVE-2026-104384 |
high | 8.7 | 0.0043 | 2026-10-29 | Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in Eagl | |
CVE-2026-105972 |
high | 7.5 | 0.0029 | 2026-10-29 | The Menu Cart for WooCommerce WordPress plugin before 3.2.1 does not sanitise and escape c | |
CVE-2026-111021 |
high | 7.1 | 0.0019 | 2026-10-29 | The افزونه پیامک ووکامرس | Persian WooCommerce SMS WordPress plugin before 7.3.2 does not | |
CVE-2026-111577 |
high | 7.2 | 0.0034 | 2026-10-29 | The GoSMTP WordPress plugin before 1.2.5 does not perform a settings-management authoriza | |
CVE-2026-15323 |
high | 7.5 | 0.0086 | 2026-10-29 | The Product Designer for WooCommerce WordPress | Lumise plugin for WordPress is vulnerable | |
CVE-2026-109381 |
high | 7.2 | 0.0043 | 2026-10-29 | The Mage Eventpress plugin for WordPress is vulnerable to privilege escalation in versions | |
CVE-2026-109384 |
high | 8.8 | 0.0073 | 2026-10-29 | The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to Arbitrary | |
CVE-2026-110662 |
high | 7.2 | 0.0031 | 2026-10-29 | The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnera |