Browse All CVEs
13,236 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-65629 |
high | 7.4 | 0.0006 | 2026-10-29 | Use of Password Hash With Insufficient Computational Effort in the jose library allows an | |
CVE-2025-13833 |
high | 7.7 | 0.0015 | 2026-10-29 | A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Conne | |
CVE-2026-112427 |
high | 8.1 | 0.0069 | 2026-10-29 | An authentication issue was addressed with improved state management. This issue is fixed | |
CVE-2026-112438 |
high | 8.8 | 0.0073 | 2026-10-29 | A logic issue was addressed with improved state management. This issue is fixed in macOS G | |
CVE-2026-112457 |
high | 7.1 | 0.0035 | 2026-10-29 | A double free issue was addressed with improved memory management. This issue is fixed in | |
CVE-2026-112484 |
high | 7.8 | 0.0021 | 2026-10-29 | This issue was addressed with improved file handling. This issue is fixed in macOS Golden | |
CVE-2026-112623 |
high | 8.8 | 0.0054 | 2026-10-29 | A use-after-free issue was addressed with improved memory management. This issue is fixed | |
CVE-2026-112626 |
high | 8.8 | 0.0057 | 2026-10-29 | A use-after-free issue was addressed with improved memory management. This issue is fixed | |
CVE-2026-112637 |
high | 8.8 | 0.0054 | 2026-10-29 | A use-after-free issue was addressed with improved memory management. This issue is fixed | |
CVE-2026-112651 |
high | 8.8 | 0.0054 | 2026-10-29 | A use-after-free issue was addressed with improved memory management. This issue is fixed | |
CVE-2026-112655 |
high | 8.8 | 0.0059 | 2026-10-29 | A use-after-free issue was addressed with improved memory management. This issue is fixed | |
CVE-2026-112659 |
high | 8.8 | 0.0056 | 2026-10-29 | A type confusion issue was addressed with improved memory handling. This issue is fixed in | |
CVE-2026-112677 |
high | 7.8 | 0.0019 | 2026-10-29 | An authorization issue was addressed with improved access control. This issue is fixed in | |
CVE-2026-112688 |
high | 8.8 | 0.0063 | 2026-10-29 | A memory corruption issue was addressed with improved memory handling. This issue is fixed | |
CVE-2026-113912 |
high | 7.1 | 0.0038 | 2026-10-29 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is f | |
CVE-2026-113947 |
high | 8.8 | 0.0051 | 2026-10-29 | This issue was addressed with improved access restrictions. This issue is fixed in macOS G | |
CVE-2026-116504 |
high | 8.6 | 0.0155 | 2026-10-29 | A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the | |
CVE-2026-116505 |
high | 8.5 | 0.0274 | 2026-10-29 | A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the func | |
CVE-2026-116506 |
high | 8.6 | 0.0188 | 2026-10-29 | A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the | |
CVE-2026-116576 |
high | 7.8 | 0.0014 | 2026-10-29 | systeminformation is a System and OS information library for node.js. Prior to 5.33.16, se | |
CVE-2026-116580 |
high | 7.3 | 0.0034 | 2026-10-29 | Seroval facilitates JavaScript value stringification, including complex structures beyond | |
CVE-2026-116581 |
high | 7.5 | 0.0045 | 2026-10-29 | Seroval facilitates JavaScript value stringification, including complex structures beyond | |
CVE-2026-116584 |
high | 7.5 | 0.0037 | 2026-10-29 | Seroval facilitates JavaScript value stringification, including complex structures beyond | |
CVE-2026-64759 |
high | 8.8 | 0.0045 | 2026-10-29 | An integer overflow was addressed with improved input validation. This issue is fixed in i | |
CVE-2026-65327 |
high | 8.4 | 0.0025 | 2026-10-29 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate | |
CVE-2026-86916 |
high | 7.8 | 0.0020 | 2026-10-29 | A use after free issue was addressed with improved memory management. This issue is fixed | |
CVE-2026-86929 |
high | 8.8 | 0.0065 | 2026-10-29 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi | |
CVE-2026-116587 |
high | 7.5 | 0.0037 | 2026-10-29 | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of | |
CVE-2026-116588 |
high | 8.7 | 0.0047 | 2026-10-29 | Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, | |
CVE-2026-116589 |
high | 8.2 | 0.0033 | 2026-10-29 | Datadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST s | |
CVE-2026-116591 |
high | 8.7 | 0.0033 | 2026-10-29 | compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and | |
CVE-2026-116723 |
high | 8.5 | 0.0016 | 2026-10-29 | FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::l | |
CVE-2026-116724 |
high | 8.5 | 0.0015 | 2026-10-29 | FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() | |
CVE-2026-116738 |
high | 8.7 | 0.0073 | 2026-10-29 | VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that a | |
CVE-2026-116740 |
high | 7.1 | 0.0033 | 2026-10-29 | libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_q | |
CVE-2026-116741 |
high | 8.3 | 0.0041 | 2026-10-29 | Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits | |
CVE-2026-116748 |
high | 8.7 | 0.0125 | 2026-10-29 | Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request | |
CVE-2026-111422 |
high | 8.8 | 0.0064 | 2026-10-29 | In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of it | |
CVE-2026-116807 |
high | 7.0 | 0.0027 | 2026-10-29 | OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated u | |
CVE-2026-116808 |
high | 8.6 | 0.0039 | 2026-10-29 | OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated u | |
CVE-2026-116811 |
high | 8.7 | 0.0049 | 2026-10-29 | OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator | |
CVE-2026-116812 |
high | 7.1 | 0.0023 | 2026-10-29 | OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in co | |
CVE-2026-116813 |
high | 7.1 | 0.0023 | 2026-10-29 | OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getCon | |
CVE-2026-116814 |
high | 7.1 | 0.0028 | 2026-10-29 | OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database | |
CVE-2026-116818 |
high | 8.8 | 0.0043 | 2026-10-29 | OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability | |
CVE-2026-116819 |
high | 8.4 | 0.0030 | 2026-10-29 | OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-l | |
CVE-2026-116821 |
high | 7.1 | 0.0028 | 2026-10-29 | YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which | |
CVE-2026-116825 |
high | 8.3 | 0.0022 | 2026-10-29 | YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySig | |
CVE-2026-116826 |
high | 8.2 | 0.0024 | 2026-10-29 | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationMa | |
CVE-2026-116827 |
high | 8.2 | 0.0034 | 2026-10-29 | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV |