Browse All CVEs
13,216 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-56155 |
high | 7.8 | 0.0035 | 2026-10-29 | KEV | Microsoft Active Directory Federation Services contains an insufficient granularity of acc |
CVE-2026-108358 |
high | 8.8 | 0.0063 | 2026-10-29 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1 | |
CVE-2026-108359 |
high | 8.7 | 0.0066 | 2026-10-29 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1 | |
CVE-2026-113873 |
high | 7.5 | 0.0052 | 2026-10-29 | SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenti | |
CVE-2026-113874 |
high | 8.1 | 0.0032 | 2026-10-29 | SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previou | |
CVE-2026-93336 |
high | 7.1 | 0.0022 | 2026-10-29 | Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4 | |
CVE-2026-97635 |
high | 8.6 | 0.0026 | 2026-10-29 | The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat | |
CVE-2026-114519 |
high | 8.6 | 0.0036 | 2026-10-29 | Missing Authorization (CWE-862) in the user API of Roskus Prospero Flow CRM from 2.0.0 bef | |
CVE-2026-114613 |
high | 7.5 | 0.0054 | 2026-10-29 | MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the m | |
CVE-2026-114644 |
high | 8.2 | 0.0048 | 2026-10-29 | The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weaknes | |
CVE-2026-114648 |
high | 7.2 | 0.0032 | 2026-10-29 | The MongoDB C# Driver does not neutralize dot and dollar characters in dictionary keys, fi | |
CVE-2026-114649 |
high | 7.6 | 0.0020 | 2026-10-29 | The MongoDB C# Driver compares TLS client certificates by issuer and serial number only wh | |
CVE-2026-114652 |
high | 7.1 | 0.0030 | 2026-10-29 | A data-query-logic neutralization weakness in the update-statement construction component | |
CVE-2026-114653 |
high | 7.1 | 0.0021 | 2026-10-29 | A client-side encryption schema construction component in the MongoDB C# Driver places cal | |
CVE-2026-115347 |
high | 8.7 | 0.0041 | 2026-10-29 | Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parse | |
CVE-2026-115348 |
high | 8.7 | 0.0044 | 2026-10-29 | Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the in | |
CVE-2026-115349 |
high | 8.7 | 0.0034 | 2026-10-29 | Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of service vulne | |
CVE-2026-115352 |
high | 8.7 | 0.0044 | 2026-10-29 | Mistune before 3.3.0 contains an algorithmic complexity vulnerability in the inline link p | |
CVE-2026-115354 |
high | 7.1 | 0.0047 | 2026-10-29 | Mistune before 3.3.0 contains a path traversal vulnerability in the opt-in Include directi | |
CVE-2026-115355 |
high | 8.7 | 0.0046 | 2026-10-29 | Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that | |
CVE-2026-115365 |
high | 7.5 | 0.0030 | 2026-10-29 | OpenBao from 2.3.0 before 2.6.3 contains an incorrect authorization vulnerability in its A | |
CVE-2026-115371 |
high | 7.1 | 0.0022 | 2026-10-29 | Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper | |
CVE-2026-115373 |
high | 7.0 | 0.0029 | 2026-10-29 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authoriz | |
CVE-2026-115374 |
high | 7.1 | 0.0018 | 2026-10-29 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in | |
CVE-2026-115376 |
high | 8.3 | 0.0027 | 2026-10-29 | Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerabi | |
CVE-2026-115392 |
high | 8.8 | 0.0024 | 2026-10-29 | Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47 | |
CVE-2026-115414 |
high | 8.4 | 0.0088 | 2026-10-29 | OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an ac | |
CVE-2026-79877 |
high | 8.8 | 0.0044 | 2026-10-29 | A remote code execution vulnerability in the underlying operating system of AOS-10 could a | |
CVE-2026-79878 |
high | 8.8 | 0.0097 | 2026-10-29 | A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI | |
CVE-2026-79879 |
high | 8.8 | 0.0036 | 2026-10-29 | Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote | |
CVE-2026-79880 |
high | 8.7 | 0.0050 | 2026-10-29 | A vulnerability in the command line interface of AOS-8 could allow an authenticated remote | |
CVE-2026-79881 |
high | 8.3 | 0.0044 | 2026-10-29 | An authentication bypass vulnerability in the underlying operating system of AOS-8 could a | |
CVE-2026-79882 |
high | 8.3 | 0.0077 | 2026-10-29 | There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead | |
CVE-2026-79883 |
high | 8.3 | 0.0022 | 2026-10-29 | A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow | |
CVE-2026-79884 |
high | 8.2 | 0.0025 | 2026-10-29 | A vulnerability in the web-based management interface of AOS-8 could allow an unauthentica | |
CVE-2026-79885 |
high | 8.2 | 0.0039 | 2026-10-29 | An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successf | |
CVE-2026-79886 |
high | 8.2 | 0.0037 | 2026-10-29 | An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Suc | |
CVE-2026-79887 |
high | 8.1 | 0.0059 | 2026-10-29 | A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attack | |
CVE-2026-79888 |
high | 8.1 | 0.0048 | 2026-10-29 | A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauth | |
CVE-2026-79889 |
high | 8.1 | 0.0063 | 2026-10-29 | Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauth | |
CVE-2026-79890 |
high | 8.1 | 0.0096 | 2026-10-29 | There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated re | |
CVE-2026-79891 |
high | 8.1 | 0.0055 | 2026-10-29 | A buffer overflow vulnerability exists in the command line interface of AOS-8 that could a | |
CVE-2026-79892 |
high | 7.8 | 0.0016 | 2026-10-29 | A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local | |
CVE-2026-79893 |
high | 7.5 | 0.0053 | 2026-10-29 | Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker | |
CVE-2026-79894 |
high | 7.5 | 0.0041 | 2026-10-29 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AO | |
CVE-2026-79895 |
high | 7.5 | 0.0051 | 2026-10-29 | Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote | |
CVE-2026-79955 |
high | 7.5 | 0.0053 | 2026-10-29 | An unauthenticated memory corruption vulnerability exists in a service accessed via the PA | |
CVE-2026-79956 |
high | 7.2 | 0.0070 | 2026-10-29 | A vulnerability in the CLI command handling of the AOS-8 web interface could allow an auth | |
CVE-2026-95704 |
high | 7.2 | 0.0066 | 2026-10-29 | A vulnerability in the web-based management interface of wireless network management syste | |
CVE-2026-95705 |
high | 7.2 | 0.0115 | 2026-10-29 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authen |