Browse All CVEs
13,207 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-103402 |
high | 8.8 | 0.0020 | 2026-10-29 | An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Network | |
CVE-2026-103403 |
high | 8.8 | 0.0118 | 2026-10-29 | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injectio | |
CVE-2026-103407 |
high | 8.8 | 0.0023 | 2026-10-29 | An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDire | |
CVE-2026-103408 |
high | 8.8 | 0.0031 | 2026-10-29 | A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart | |
CVE-2026-103410 |
high | 7.5 | 0.0032 | 2026-10-29 | An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Sessi | |
CVE-2026-103411 |
high | 7.1 | 0.0017 | 2026-10-29 | An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart | |
CVE-2026-103506 |
high | 8.9 | 0.0027 | 2026-10-29 | An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO | |
CVE-2026-106079 |
high | 8.8 | 0.0118 | 2026-10-29 | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injectio | |
CVE-2026-118510 |
high | 7.7 | 0.0028 | 2026-10-29 | A type-handling flaw in the relationship query building of this MongoDB integration librar | |
CVE-2026-118602 |
high | 7.8 | 0.0012 | 2026-10-29 | Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerabili | |
CVE-2026-118603 |
high | 8.0 | 0.0024 | 2026-10-29 | Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerabil | |
CVE-2026-118605 |
high | 8.0 | 0.0024 | 2026-10-29 | Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Exec | |
CVE-2026-118606 |
high | 8.8 | 0.0034 | 2026-10-29 | Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnera | |
CVE-2026-118610 |
high | 8.8 | 0.0034 | 2026-10-29 | Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vul | |
CVE-2026-118613 |
high | 7.8 | 0.0024 | 2026-10-29 | Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerabili | |
CVE-2026-118614 |
high | 7.8 | 0.0020 | 2026-10-29 | Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vul | |
CVE-2026-118615 |
high | 7.8 | 0.0041 | 2026-10-29 | Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability. This vu | |
CVE-2026-118616 |
high | 7.8 | 0.0020 | 2026-10-29 | Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerabi | |
CVE-2026-118617 |
high | 7.8 | 0.0026 | 2026-10-29 | Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Executio | |
CVE-2026-118618 |
high | 7.8 | 0.0022 | 2026-10-29 | Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerabi | |
CVE-2026-118619 |
high | 8.8 | 0.0053 | 2026-10-29 | Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This | |
CVE-2026-82961 |
high | 7.8 | 0.0013 | 2026-10-29 | The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argumen | |
CVE-2026-88967 |
high | 7.7 | 0.0029 | 2026-10-29 | A user with query access to an Azure Monitor data source in Grafana can cause server-side | |
CVE-2026-93523 |
high | 7.8 | 0.0020 | 2026-10-29 | A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modi | |
CVE-2026-116794 |
high | 8.3 | 0.0016 | 2026-10-29 | russh is a Rust SSH client and server library that includes an SSH agent protocol implemen | |
CVE-2026-116795 |
high | 7.5 | 0.0046 | 2026-10-29 | RE2JS is the JavaScript port of RE2, a regular expression engine that provides linear time | |
CVE-2026-116796 |
high | 7.2 | 0.0034 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 10.3.2 until 11.4.9, 12. | |
CVE-2026-116797 |
high | 8.5 | 0.0032 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highc | |
CVE-2026-118242 |
high | 8.5 | 0.0031 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highc | |
CVE-2026-118244 |
high | 7.2 | 0.0034 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and | |
CVE-2026-118245 |
high | 8.6 | 0.0034 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highc | |
CVE-2026-118246 |
high | 8.4 | 0.0034 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 11.4.9, 12. | |
CVE-2026-118249 |
high | 7.2 | 0.0036 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 13.0.0 until 13.1.0, Hig | |
CVE-2026-118250 |
high | 7.2 | 0.0036 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 6.1.0 until 11.4.9, 12.6 | |
CVE-2026-84725 |
high | 8.1 | 0.0034 | 2026-10-29 | when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR code | |
CVE-2026-118251 |
high | 8.4 | 0.0043 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and | |
CVE-2026-118252 |
high | 8.4 | 0.0042 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highc | |
CVE-2026-118253 |
high | 8.4 | 0.0042 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highc | |
CVE-2026-118254 |
high | 8.6 | 0.0042 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highc | |
CVE-2026-118255 |
high | 8.4 | 0.0035 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highc | |
CVE-2026-118257 |
high | 7.2 | 0.0027 | 2026-10-29 | Vue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4.14 and fro | |
CVE-2026-118260 |
high | 8.2 | 0.0037 | 2026-10-29 | Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in BodyDump middleware | |
CVE-2026-118261 |
high | 8.2 | 0.0037 | 2026-10-29 | Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in Decompress middlewar | |
CVE-2026-118262 |
high | 8.2 | 0.0030 | 2026-10-29 | Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware ca | |
CVE-2026-118645 |
high | 7.0 | 0.0023 | 2026-10-29 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injecti | |
CVE-2026-118646 |
high | 7.1 | 0.0025 | 2026-10-29 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vu | |
CVE-2026-118648 |
high | 8.4 | 0.0026 | 2026-10-29 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-s | |
CVE-2026-118649 |
high | 8.7 | 0.0027 | 2026-10-29 | n8n before 2.43.5 and 2.44.x before 2.44.1 accepts a client-supplied workflow ID and cache | |
CVE-2026-118678 |
high | 7.1 | 0.0029 | 2026-10-29 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability th | |
CVE-2026-118683 |
high | 8.6 | 0.0049 | 2026-10-29 | MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWork |