Browse All CVEs
39,684 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-5278 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a r | |
CVE-2026-5279 |
high | 8.8 | 0.0043 | 2026-10-29 | Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker | |
CVE-2026-5280 |
high | 8.8 | 0.0039 | 2026-10-29 | Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote atta | |
CVE-2026-5282 |
high | 8.1 | 0.0025 | 2026-10-29 | Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote | |
CVE-2026-5283 |
medium | 6.5 | 0.0027 | 2026-10-29 | Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a r | |
CVE-2026-5284 |
high | 7.5 | 0.0035 | 2026-10-29 | Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker | |
CVE-2026-5285 |
high | 8.8 | 0.0040 | 2026-10-29 | Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker | |
CVE-2026-5286 |
high | 8.8 | 0.0039 | 2026-10-29 | Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker | |
CVE-2026-5287 |
high | 8.8 | 0.0051 | 2026-10-29 | Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker t | |
CVE-2026-5288 |
critical | 9.6 | 0.0032 | 2026-10-29 | Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a re | |
CVE-2026-5289 |
critical | 9.6 | 0.0035 | 2026-10-29 | Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote att | |
CVE-2026-5290 |
critical | 9.6 | 0.0032 | 2026-10-29 | Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote at | |
CVE-2026-5291 |
medium | 6.5 | 0.0025 | 2026-10-29 | Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a r | |
CVE-2026-5292 |
high | 8.8 | 0.0032 | 2026-10-29 | Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote | |
CVE-2026-5255 |
low | 2.1 | 0.0027 | 2026-10-29 | A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an u | |
CVE-2026-5256 |
medium | 5.5 | 0.0034 | 2026-10-29 | A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affec | |
CVE-2026-5257 |
medium | 5.5 | 0.0034 | 2026-10-29 | A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affe | |
CVE-2026-5258 |
medium | 5.5 | 0.0063 | 2026-10-29 | A vulnerability was found in Sanster IOPaint 1.5.3. Impacted is the function _get_file of | |
CVE-2026-27101 |
high | 7.2 | 0.0040 | 2026-10-29 | Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5 | |
CVE-2026-28265 |
high | 7.1 | 0.0012 | 2026-10-29 | PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged | |
CVE-2026-5259 |
low | 2.1 | 0.0021 | 2026-10-29 | A vulnerability was determined in AutohomeCorp frostmourne up to 1.0. The affected element | |
CVE-2026-34889 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-4370 |
critical | 10.0 | 0.0039 | 2026-10-29 | A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4. | |
CVE-2026-5261 |
medium | 5.5 | 0.0039 | 2026-10-29 | A vulnerability was identified in Shandong Hoteam InforCenter PLM up to 8.3.8. The impacte | |
CVE-2026-1879 |
low | 2.1 | 0.0026 | 2026-10-29 | A vulnerability was detected in Harvard University IQSS Dataverse up to 6.8. This affects | |
CVE-2026-21629 |
medium | 6.3 | 0.0026 | 2026-10-29 | The ajax component was excluded from the default logged-in-user check in the administrativ | |
CVE-2026-21630 |
medium | 6.9 | 0.0035 | 2026-10-29 | Improperly built order clauses lead to a SQL injection vulnerability in the articles webse | |
CVE-2026-21631 |
medium | 5.9 | 0.0022 | 2026-10-29 | Lack of output escaping leads to a XSS vector in the multilingual associations component. | |
CVE-2026-21632 |
medium | 5.9 | 0.0019 | 2026-10-29 | Lack of output escaping for article titles leads to XSS vectors in various locations. | |
CVE-2026-23898 |
high | 8.6 | 0.0046 | 2026-10-29 | Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupda | |
CVE-2026-23899 |
high | 8.6 | 0.0041 | 2026-10-29 | An improper access check allows unauthorized access to webservice endpoints. | |
CVE-2026-0932 |
medium | 6.9 | 0.0020 | 2026-10-29 | Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of doc | |
CVE-2026-25601 |
medium | 6.7 | 0.0016 | 2026-10-29 | A vulnerability was identified in MEPIS RM, an industrial software product developed by Me | |
CVE-2026-22767 |
high | 7.3 | 0.0017 | 2026-10-29 | Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulne | |
CVE-2026-22768 |
high | 7.3 | 0.0013 | 2026-10-29 | Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical | |
CVE-2026-34430 |
high | 8.6 | 0.0041 | 2026-10-29 | ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability | |
CVE-2026-34999 |
medium | 6.9 | 0.0043 | 2026-10-29 | OpenViking versions 0.2.5 prior to 0.2.14 contain a missing authentication vulnerability i | |
CVE-2026-35091 |
high | 8.2 | 0.0088 | 2026-10-29 | A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return | |
CVE-2026-35092 |
high | 7.5 | 0.0101 | 2026-10-29 | A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message | |
CVE-2026-35093 |
high | 8.8 | 0.0018 | 2026-10-29 | A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytec | |
CVE-2026-35094 |
medium | 5.5 | 0.0015 | 2026-10-29 | A flaw was found in libinput. An attacker capable of deploying a Lua plugin file in specif | |
CVE-2026-3877 |
high | 7.3 | 0.0019 | 2026-10-29 | A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality | |
CVE-2026-5271 |
medium | 5.6 | 0.0018 | 2026-10-29 | pymanager included the current working directory in sys.path meaning modules could be shad | |
CVE-2026-35099 |
high | 7.4 | 0.0013 | 2026-10-29 | Lakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant local priv | |
CVE-2026-4828 |
high | 8.2 | 0.0026 | 2026-10-29 | Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 a | |
CVE-2026-4829 |
medium | 5.4 | 0.0017 | 2026-10-29 | Improper authentication in the external OAuth authentication flow in Devolutions Server 20 | |
CVE-2026-4924 |
high | 8.2 | 0.0033 | 2026-10-29 | Improper authentication in the two-factor authentication (2FA) feature in Devolutions Se | |
CVE-2026-4925 |
medium | 5.0 | 0.0020 | 2026-10-29 | Improper access control in the users MFA feature in Devolutions Server allows an authentic | |
CVE-2026-4927 |
medium | 6.5 | 0.0023 | 2026-10-29 | Exposure of sensitive information in the users MFA feature in Devolutions Server allows us | |
CVE-2026-4989 |
medium | 4.3 | 0.0017 | 2026-10-29 | Improper input validation in the gateway health check feature in Devolutions Server allows |