Browse All CVEs
3,395 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-115384 |
critical | 9.4 | 0.0031 | 2026-10-29 | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vu | |
CVE-2026-79844 |
critical | 10.0 | 0.0069 | 2026-10-29 | Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an u | |
CVE-2026-79846 |
critical | 10.0 | 0.0137 | 2026-10-29 | Command injection vulnerabilities exist in the affected interface of AOS-8 that could allo | |
CVE-2026-79847 |
critical | 10.0 | 0.0082 | 2026-10-29 | Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthen | |
CVE-2026-79848 |
critical | 10.0 | 0.0070 | 2026-10-29 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote a | |
CVE-2026-79849 |
critical | 10.0 | 0.0070 | 2026-10-29 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote a | |
CVE-2026-79850 |
critical | 10.0 | 0.0069 | 2026-10-29 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote a | |
CVE-2026-79851 |
critical | 10.0 | 0.0076 | 2026-10-29 | Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead | |
CVE-2026-79852 |
critical | 9.8 | 0.0064 | 2026-10-29 | A vulnerability in the web-based management interface of AOS could allow an unauthenticate | |
CVE-2026-79853 |
critical | 9.8 | 0.0070 | 2026-10-29 | Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could | |
CVE-2026-79854 |
critical | 9.8 | 0.0064 | 2026-10-29 | A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote | |
CVE-2026-79855 |
critical | 9.8 | 0.0075 | 2026-10-29 | An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticate | |
CVE-2026-79856 |
critical | 9.8 | 0.0061 | 2026-10-29 | A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an u | |
CVE-2026-79857 |
critical | 9.8 | 0.0141 | 2026-10-29 | There is a command injection vulnerability in the PAPI protocol (Aruba's access point mana | |
CVE-2026-79858 |
critical | 9.8 | 0.0051 | 2026-10-29 | An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Succe | |
CVE-2026-79859 |
critical | 9.8 | 0.0069 | 2026-10-29 | Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead t | |
CVE-2026-79860 |
critical | 9.8 | 0.0074 | 2026-10-29 | Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to | |
CVE-2026-79861 |
critical | 9.8 | 0.0156 | 2026-10-29 | There is a command injection vulnerability in AOS-10 that could lead to unauthenticated re | |
CVE-2026-79862 |
critical | 9.6 | 0.0026 | 2026-10-29 | Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow a | |
CVE-2026-79863 |
critical | 9.6 | 0.0026 | 2026-10-29 | Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow a | |
CVE-2026-79864 |
critical | 9.6 | 0.0116 | 2026-10-29 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could all | |
CVE-2026-79865 |
critical | 9.6 | 0.0035 | 2026-10-29 | A memory corruption vulnerability in the affected interface of AOS-10 could allow an unaut | |
CVE-2026-79866 |
critical | 9.6 | 0.0024 | 2026-10-29 | An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Succ | |
CVE-2026-79867 |
critical | 9.6 | 0.0029 | 2026-10-29 | Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an un | |
CVE-2026-79868 |
critical | 9.6 | 0.0027 | 2026-10-29 | Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an un | |
CVE-2026-79869 |
critical | 9.6 | 0.0029 | 2026-10-29 | Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an u | |
CVE-2026-79870 |
critical | 9.6 | 0.0027 | 2026-10-29 | An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauth | |
CVE-2026-79871 |
critical | 9.6 | 0.0031 | 2026-10-29 | A sensitive information disclosure vulnerability in the command line interface of AOS-10 c | |
CVE-2026-79872 |
critical | 9.4 | 0.0056 | 2026-10-29 | A buffer overflow vulnerability exists in the underlying operating system of AOS that coul | |
CVE-2026-79873 |
critical | 9.3 | 0.0024 | 2026-10-29 | Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauth | |
CVE-2026-79874 |
critical | 9.3 | 0.0024 | 2026-10-29 | An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker | |
CVE-2026-79875 |
critical | 9.3 | 0.0023 | 2026-10-29 | A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially a | |
CVE-2026-79876 |
critical | 9.3 | 0.0023 | 2026-10-29 | A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 c | |
CVE-2026-114625 |
critical | 9.4 | 0.0103 | 2026-10-29 | KEV | Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allo |
CVE-2026-105014 |
critical | 9.1 | 0.0067 | 2026-10-29 | 1 PoC | Improper neutralization of special elements used in a command ('command injection') in Azu |
CVE-2026-109122 |
critical | 9.4 | 0.0052 | 2026-10-29 | The network management service on affected Kiloview E3 NDI encoder firmware fails to sanit | |
CVE-2026-110063 |
critical | 10.0 | 0.0089 | 2026-10-29 | 1 PoC | Improper link resolution before file access ('link following') in VM Inspector for Azure V |
CVE-2026-111594 |
critical | 9.2 | 0.0019 | 2026-10-29 | InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enabl | |
CVE-2026-114615 |
critical | 9.1 | 0.0019 | 2026-10-29 | Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 unti | |
CVE-2026-114616 |
critical | 9.1 | 0.0021 | 2026-10-29 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, | |
CVE-2026-83938 |
critical | 10.0 | 0.0071 | 2026-10-29 | 1 PoC | Missing authentication for critical function in Azure Kubernetes Configuration Service all |
CVE-2026-97785 |
critical | 10.0 | 0.0065 | 2026-10-29 | 1 PoC | Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privil |
CVE-2026-107861 |
critical | 9.4 | 0.0051 | 2026-10-29 | The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize | |
CVE-2026-110243 |
critical | 9.4 | 0.0051 | 2026-10-29 | The network management service on affected Kiloview E3 NDI encoder firmware fails to valid | |
CVE-2026-19677 |
critical | 9.3 | 0.0053 | 2026-10-29 | An authentication bypass vulnerability in the public onPhase/ frevvo registration form ver | |
CVE-2026-115547 |
critical | 9.1 | 0.0054 | 2026-10-29 | An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the proces | |
CVE-2026-54630 |
critical | 9.6 | 0.0023 | 2026-10-29 | Part-DB is an open source inventory management system for electronic components. Prior to | |
CVE-2026-94267 |
critical | 9.0 | 0.0039 | 2026-10-29 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fiel | |
CVE-2026-55981 |
critical | 9.6 | 0.0023 | 2026-10-29 | A firmware verification vulnerability in Creative Sound Blaster Katana could allow an atta | |
CVE-2026-63244 |
critical | 9.8 | 0.0066 | 2026-10-29 | An authentication bypass vulnerability in WizLearn Technologies' Learning Management Syste |