Browse All CVEs
13,232 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-116189 |
high | 7.7 | 0.0014 | 2026-10-29 | rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfup | |
CVE-2026-116191 |
high | 8.7 | 0.0039 | 2026-10-29 | Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows u | |
CVE-2026-116192 |
high | 8.2 | 0.0022 | 2026-10-29 | rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that a | |
CVE-2026-116194 |
high | 7.6 | 0.0012 | 2026-10-29 | Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in th | |
CVE-2026-116195 |
high | 7.0 | 0.0023 | 2026-10-29 | Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's transl | |
CVE-2026-116200 |
high | 8.2 | 0.0015 | 2026-10-29 | Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), | |
CVE-2026-116201 |
high | 8.7 | 0.0030 | 2026-10-29 | Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers | |
CVE-2026-116204 |
high | 7.2 | 0.0014 | 2026-10-29 | YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam act | |
CVE-2026-116207 |
high | 8.8 | 0.0031 | 2026-10-29 | YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticate | |
CVE-2026-116208 |
high | 7.2 | 0.0024 | 2026-10-29 | YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in Activity | |
CVE-2026-116211 |
high | 8.8 | 0.0029 | 2026-10-29 | YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), | |
CVE-2026-113345 |
high | 7.8 | 0.0012 | 2026-10-29 | Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, I | |
CVE-2026-107894 |
high | 7.8 | 0.0014 | 2026-10-29 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerabi | |
CVE-2026-107895 |
high | 7.8 | 0.0013 | 2026-10-29 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. O | |
CVE-2026-107896 |
high | 7.8 | 0.0013 | 2026-10-29 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in | |
CVE-2026-107897 |
high | 7.8 | 0.0013 | 2026-10-29 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in | |
CVE-2026-107898 |
high | 7.8 | 0.0013 | 2026-10-29 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in | |
CVE-2026-107899 |
high | 7.8 | 0.0013 | 2026-10-29 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in | |
CVE-2026-107900 |
high | 7.8 | 0.0013 | 2026-10-29 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in | |
CVE-2026-96581 |
high | 7.6 | 0.0026 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash allows a | |
CVE-2026-111841 |
high | 8.8 | 0.0013 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Aman FunnelKit Automations wp-marketing | |
CVE-2026-116236 |
high | 8.6 | 0.0039 | 2026-10-29 | A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is | |
CVE-2026-116372 |
high | 7.7 | 0.0036 | 2026-10-29 | MISP mispguard is a security filtering proxy that inspects and blocks MISP feed responses | |
CVE-2026-70388 |
high | 8.3 | 0.0021 | 2026-10-29 | SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the ne | |
CVE-2026-82944 |
high | 8.8 | 0.0021 | 2026-10-29 | SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers wh | |
CVE-2026-82947 |
high | 7.1 | 0.0017 | 2026-10-29 | SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where | |
CVE-2026-115608 |
high | 8.5 | 0.0029 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-115948 |
high | 8.5 | 0.0029 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-116469 |
high | 7.1 | 0.0037 | 2026-10-29 | MISP Guard, a proxy-based security filter for MISP feed distribution, contains a case-sens | |
CVE-2026-89209 |
high | 7.6 | 0.0026 | 2026-10-29 | A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < | |
CVE-2026-94380 |
high | 8.1 | 0.0032 | 2026-10-29 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Lim | |
CVE-2026-108525 |
high | 8.7 | 0.0060 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implement | |
CVE-2026-108529 |
high | 8.7 | 0.0060 | 2026-10-29 | Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel b | |
CVE-2026-109584 |
high | 8.7 | 0.0060 | 2026-10-29 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in the HTTP | |
CVE-2026-110474 |
high | 8.7 | 0.0037 | 2026-10-29 | This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to h | |
CVE-2026-110499 |
high | 8.7 | 0.0060 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implement | |
CVE-2026-111101 |
high | 8.7 | 0.0060 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/1.1 chunked | |
CVE-2026-111103 |
high | 8.2 | 0.0063 | 2026-10-29 | Improper Cleanup on Thrown Exception vulnerability in the HTTP/2 handler of mtrudel bandit | |
CVE-2026-113436 |
high | 8.7 | 0.0060 | 2026-10-29 | Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel b | |
CVE-2026-114213 |
high | 8.7 | 0.0060 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in the WebSocket fragme | |
CVE-2026-115189 |
high | 8.8 | 0.0059 | 2026-10-29 | A server-side template injection vulnerability exists in the Twig theme rendering sandbox | |
CVE-2026-115190 |
high | 8.0 | 0.0049 | 2026-10-29 | An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handli | |
CVE-2026-115191 |
high | 7.1 | 0.0035 | 2026-10-29 | A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic admin | |
CVE-2026-115192 |
high | 7.1 | 0.0035 | 2026-10-29 | An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data | |
CVE-2026-115193 |
high | 8.2 | 0.0031 | 2026-10-29 | A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mau | |
CVE-2026-115269 |
high | 8.7 | 0.0060 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request b | |
CVE-2026-116210 |
high | 7.1 | 0.0017 | 2026-10-29 | Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in th | |
CVE-2026-116218 |
high | 7.2 | 0.0027 | 2026-10-29 | Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows | |
CVE-2026-116219 |
high | 8.6 | 0.0208 | 2026-10-29 | Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/ad | |
CVE-2026-116488 |
high | 7.0 | 0.0037 | 2026-10-29 | 1 PoC | NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap b |