Browse All CVEs
13,216 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-95705 |
high | 7.2 | 0.0115 | 2026-10-29 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authen | |
CVE-2026-95706 |
high | 7.2 | 0.0115 | 2026-10-29 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authen | |
CVE-2026-95707 |
high | 7.2 | 0.0071 | 2026-10-29 | A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated | |
CVE-2026-95708 |
high | 7.2 | 0.0126 | 2026-10-29 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could all | |
CVE-2026-95709 |
high | 7.2 | 0.0126 | 2026-10-29 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could all | |
CVE-2026-95710 |
high | 7.1 | 0.0023 | 2026-10-29 | An unauthenticated buffer overflow vulnerability exists in the underlying operating system | |
CVE-2026-95711 |
high | 7.1 | 0.0024 | 2026-10-29 | An authentication bypass vulnerability in the web-based management interface of AOS-10 cou | |
CVE-2026-95712 |
high | 7.1 | 0.0024 | 2026-10-29 | A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow | |
CVE-2026-95713 |
high | 7.0 | 0.0029 | 2026-10-29 | An unauthenticated buffer overflow vulnerability exists in the command line interface of A | |
CVE-2026-112330 |
high | 8.7 | 0.0068 | 2026-10-29 | Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote at | |
CVE-2026-112331 |
high | 8.7 | 0.0068 | 2026-10-29 | Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote at | |
CVE-2026-112332 |
high | 8.7 | 0.0063 | 2026-10-29 | Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserialize | |
CVE-2026-115504 |
high | 8.5 | 0.0013 | 2026-10-29 | CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcol | |
CVE-2026-115505 |
high | 7.2 | 0.0021 | 2026-10-29 | libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in | |
CVE-2026-115506 |
high | 8.7 | 0.0046 | 2026-10-29 | libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs p | |
CVE-2026-115508 |
high | 7.1 | 0.0046 | 2026-10-29 | Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerab | |
CVE-2026-115417 |
high | 7.5 | 0.0035 | 2026-10-29 | Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS | |
CVE-2026-115419 |
high | 8.6 | 0.0043 | 2026-10-29 | The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon | |
CVE-2026-108456 |
high | 7.7 | 0.0070 | 2026-10-29 | Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to el | |
CVE-2026-114616 |
high | 7.4 | 0.0030 | 2026-10-29 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, | |
CVE-2026-96185 |
high | 7.5 | 0.0054 | 2026-10-29 | Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to | |
CVE-2026-96616 |
high | 8.3 | 0.0037 | 2026-10-29 | Authentication tokens issued by the E3's web management interface on login are given an ex | |
CVE-2026-110825 |
high | 8.7 | 0.0041 | 2026-10-29 | The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DN | |
CVE-2026-92450 |
high | 8.7 | 0.0037 | 2026-10-29 | The authentication framework used by affected Kiloview E3 NDI encoder firmware signs sessi | |
CVE-2026-115484 |
high | 7.6 | 0.0022 | 2026-10-29 | A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorre | |
CVE-2026-115486 |
high | 7.1 | 0.0021 | 2026-10-29 | A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery hand | |
CVE-2026-19678 |
high | 8.7 | 0.0039 | 2026-10-29 | A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in | |
CVE-2026-115546 |
high | 8.1 | 0.0042 | 2026-10-29 | Okta Access Gateway (OAG) does not validate the selected authentication source during sign | |
CVE-2026-109198 |
high | 7.2 | 0.0038 | 2026-10-29 | The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulne | |
CVE-2026-115497 |
high | 7.5 | 0.0089 | 2026-10-29 | The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Trav | |
CVE-2026-86055 |
high | 8.7 | 0.0059 | 2026-10-29 | Part-DB is an open source inventory management system for electronic components. Prior to | |
CVE-2026-107858 |
high | 7.2 | 0.0036 | 2026-10-29 | Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with | |
CVE-2026-109936 |
high | 7.5 | 0.0028 | 2026-10-29 | The Otter Blocks WordPress plugin before 3.2.8 does not correctly bound a pattern it uses | |
CVE-2026-111982 |
high | 7.2 | 0.0033 | 2026-10-29 | The User Profile Builder WordPress plugin before 4.0.5 does not verify that a user is aut | |
CVE-2026-113499 |
high | 7.5 | 0.0030 | 2026-10-29 | The LiteSpeed Cache WordPress plugin before 7.9.2 does not restrict one of its HTML rewrit | |
CVE-2026-113500 |
high | 7.5 | 0.0030 | 2026-10-29 | The LiteSpeed Cache WordPress plugin before 7.9.2 does not limit one of its HTML optimizat | |
CVE-2026-94262 |
high | 8.1 | 0.0029 | 2026-10-29 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fiel | |
CVE-2026-94268 |
high | 8.1 | 0.0032 | 2026-10-29 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fiel | |
CVE-2026-75775 |
high | 7.7 | 0.0060 | 2026-10-29 | Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers | |
CVE-2026-75779 |
high | 8.6 | 0.0120 | 2026-10-29 | Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) | |
CVE-2026-93489 |
high | 8.7 | 0.0023 | 2026-10-29 | Improper Authentication in ASUS router modules allows an unauthenticated nearby user to se | |
CVE-2025-30043 |
high | 7.1 | 0.0021 | 2026-10-29 | CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocMana | |
CVE-2025-30045 |
high | 8.6 | 0.0020 | 2026-10-29 | CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Per | |
CVE-2025-30049 |
high | 8.2 | 0.0021 | 2026-10-29 | The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue wa | |
CVE-2025-30052 |
high | 8.8 | 0.0034 | 2026-10-29 | The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoof | |
CVE-2026-112359 |
high | 7.5 | 0.0032 | 2026-10-29 | Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting | |
CVE-2026-112835 |
high | 7.1 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-112837 |
high | 8.5 | 0.0031 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-112838 |
high | 7.1 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-16762 |
high | 8.7 | 0.0052 | 2026-10-29 | An attacker able to supply a crafted XML document to an application using QXmlStreamReader |