Browse All CVEs
13,207 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-99212 |
high | 7.0 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let th | |
CVE-2026-99213 |
high | 7.8 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOS | |
CVE-2026-99216 |
high | 8.4 | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't re | |
CVE-2026-102790 |
high | 8.6 | 0.0028 | 2026-10-29 | Joomla Extension - icagenda.com - Stored XSS via url-type event Custom Field in iCagenda | |
CVE-2026-118477 |
high | 8.7 | 0.0111 | 2026-10-29 | The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vuln | |
CVE-2026-118485 |
high | 7.0 | 0.0056 | 2026-10-29 | Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode() | |
CVE-2026-111850 |
high | 8.5 | 0.0021 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-115591 |
high | 7.5 | 0.0034 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in Supsystic Contact Form | |
CVE-2026-115593 |
high | 7.1 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115596 |
high | 7.1 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115606 |
high | 7.1 | 0.0015 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115609 |
high | 7.1 | 0.0015 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115612 |
high | 7.1 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-116391 |
high | 8.8 | 0.0037 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in GS Plugins GS Logo Slider gs-logo-slide | |
CVE-2026-116392 |
high | 7.2 | 0.0030 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows | |
CVE-2026-116393 |
high | 7.5 | 0.0032 | 2026-10-29 | Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express all | |
CVE-2026-118035 |
high | 7.5 | 0.0029 | 2026-10-29 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontro | |
CVE-2026-118036 |
high | 7.5 | 0.0037 | 2026-10-29 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontro | |
CVE-2026-118037 |
high | 7.5 | 0.0027 | 2026-10-29 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontro | |
CVE-2026-118038 |
high | 7.1 | 0.0025 | 2026-10-29 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path t | |
CVE-2026-118039 |
high | 7.5 | 0.0027 | 2026-10-29 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML e | |
CVE-2026-118040 |
high | 7.5 | 0.0009 | 2026-10-29 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper | |
CVE-2026-67073 |
high | 8.6 | 0.0022 | 2026-10-29 | HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vuln | |
CVE-2026-115590 |
high | 7.2 | 0.0030 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object I | |
CVE-2026-115603 |
high | 8.5 | 0.0021 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-116078 |
high | 8.7 | 0.0049 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request b | |
CVE-2026-116389 |
high | 8.8 | 0.0029 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in crossi72 Phoenix Media Rename phoenix-m | |
CVE-2026-116390 |
high | 7.2 | 0.0030 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in stepasyuk Filter Everything — Word | |
CVE-2026-52729 |
high | 7.1 | 0.0029 | 2026-10-29 | Xibo is an open source digital signage platform with a web content management system and W | |
CVE-2026-59164 |
high | 7.1 | 0.0020 | 2026-10-29 | NORA is a self-hosted artifact registry and pull-through cache. Prior to 0.9.5, `nora-regi | |
CVE-2026-59172 |
high | 7.8 | 0.0016 | 2026-10-29 | Joker is a small Clojure interpreter, linter and formatter written in Go. Prior to 1.8.2, | |
CVE-2026-59176 |
high | 7.8 | 0.0021 | 2026-10-29 | Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the ` | |
CVE-2026-59177 |
high | 8.8 | 0.0117 | 2026-10-29 | ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. | |
CVE-2026-59179 |
high | 8.3 | 0.0039 | 2026-10-29 | OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, `@openhop/s | |
CVE-2026-59185 |
high | 8.5 | 0.0032 | 2026-10-29 | identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Pr | |
CVE-2026-93517 |
high | 8.5 | 0.0019 | 2026-10-29 | A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen | |
CVE-2026-106972 |
high | 7.5 | 0.0034 | 2026-10-29 | Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions | |
CVE-2026-93518 |
high | 7.8 | 0.0020 | 2026-10-29 | An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflo | |
CVE-2026-93519 |
high | 7.8 | 0.0020 | 2026-10-29 | A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server | |
CVE-2026-93520 |
high | 7.8 | 0.0020 | 2026-10-29 | A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and | |
CVE-2026-112357 |
high | 8.5 | 0.0013 | 2026-10-29 | GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0. | |
CVE-2026-116776 |
high | 7.0 | 0.0018 | 2026-10-29 | USB Test is a lightweight Windows CLI utility for verifying sector integrity and detecting | |
CVE-2026-116778 |
high | 8.8 | 0.0047 | 2026-10-29 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior | |
CVE-2026-47235 |
high | 7.5 | 0.0015 | 2026-10-29 | SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds afte | |
CVE-2026-56828 |
high | 8.8 | 0.0044 | 2026-10-29 | Shopper is a Headless e-commerce Admin Panel. From 2.8.0 until 2.8.1, three Shopper Livewi | |
CVE-2026-59979 |
high | 8.3 | 0.0029 | 2026-10-29 | YosemiteCrew provides organization-based service and task management. In the source-report | |
CVE-2026-93521 |
high | 7.8 | 0.0020 | 2026-10-29 | A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 | |
CVE-2026-93522 |
high | 7.8 | 0.0020 | 2026-10-29 | A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Or | |
CVE-2026-100105 |
high | 7.7 | 0.0029 | 2026-10-29 | A user with permission to edit contact points but not their protected fields can change pr | |
CVE-2026-103401 |
high | 8.8 | 0.0034 | 2026-10-29 | An Improper Link Resolution Before File Access ('Link Following') vulnerability in the una |