Browse All CVEs
34,102 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-119371 |
medium | 6.8 | 0.0020 | 2026-10-30 | SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to by | |
CVE-2026-119146 |
medium | 6.3 | 0.0046 | 2026-10-30 | ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_re | |
CVE-2026-119147 |
medium | 5.3 | 0.0029 | 2026-10-30 | ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy- | |
CVE-2025-68394 |
high | 8.4 | 0.0020 | 2026-10-30 | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerabil | |
CVE-2025-68395 |
medium | 5.1 | 0.0025 | 2026-10-30 | ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable t | |
CVE-2025-68392 |
medium | 5.1 | 0.0017 | 2026-10-30 | ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of | |
CVE-2025-68393 |
high | 8.4 | 0.0020 | 2026-10-30 | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerabil | |
CVE-2025-68391 |
medium | 5.3 | 0.0024 | 2026-10-30 | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. A | |
CVE-2026-111505 |
high | 8.8 | 0.0145 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization o | |
CVE-2026-101214 |
high | 7.2 | 0.0284 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization o | |
CVE-2026-110971 |
high | 7.7 | 0.0017 | 2026-10-30 | Use of a weak password encoding algorithm in Płatnik software allows a user who obtains en | |
CVE-2026-110972 |
high | 8.6 | 0.0021 | 2026-10-30 | Płatnik performs client-side authentication. An attacker with access to any application in | |
CVE-2026-101213 |
high | 7.8 | 0.0013 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Manage | |
CVE-2026-110970 |
low | 2.3 | 0.0034 | 2026-10-30 | Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an | |
CVE-2026-101210 |
high | 7.2 | 0.0284 | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization o | |
CVE-2026-110680 |
high | 7.5 | 0.0047 | 2026-10-30 | Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied o | |
CVE-2026-110681 |
high | 8.1 | 0.0043 | 2026-10-30 | Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a | |
CVE-2026-116366 |
critical | 9.5 | 0.0040 | 2026-10-30 | 1 PoC | An issue has been discovered in ClickHouse Server that, under certain conditions, could al |
CVE-2025-31704 |
critical | 9.8 | 0.0136 | 2026-10-30 | A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attack | |
CVE-2026-22110 |
high | 8.7 | 0.0024 | 2026-10-30 | The web server does not check authentication on POST or PUT. An unauthenticated attacker c | |
CVE-2026-22114 |
medium | 5.3 | 0.0019 | 2026-10-30 | HTTP basic auth enforces no retry limit or backoff. Combined with the default service pass | |
CVE-2026-22105 |
high | 8.7 | 0.0019 | 2026-10-30 | Delta UFC500 charging stations derive the default credentials of the Service account from | |
CVE-2026-22109 |
high | 8.4 | 0.0015 | 2026-10-30 | The shipped WebUI template database retains the factory default passwords for all five acc | |
CVE-2024-9287 |
medium | 5.3 | 0.0065 | 2026-10-30 | A vulnerability has been found in the CPython `venv` module and CLI where path names provi | |
CVE-2026-81726 |
high | 8.3 | 0.0034 | 2026-10-30 | NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that by | |
CVE-2026-112192 |
medium | 5.3 | 0.0037 | 2026-10-30 | MISP contains a vulnerability in the handling of module plugin settings. When the server r | |
CVE-2026-85268 |
high | 8.7 | 0.0058 | 2026-10-30 | A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Id | |
CVE-2026-14467 |
high | 8.2 | 0.0029 | 2026-10-30 | An information disclosure vulnerability in the Forocoches comments editor that allows an a | |
CVE-2026-97209 |
medium | 5.4 | 0.0011 | 2026-10-30 | Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user | |
CVE-2026-64618 |
critical | 9.8 | 0.0023 | 2026-10-30 | Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulne | |
CVE-2026-59388 |
medium | 6.5 | 0.0030 | 2026-10-30 | Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom | |
CVE-2026-59396 |
medium | 6.9 | 0.0029 | 2026-10-30 | A denial-of-service vulnerability exists in UAA's private_key_jwt client-authentication me | |
CVE-2026-59385 |
low | 2.7 | 0.0018 | 2026-10-30 | A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker withou | |
CVE-2026-59386 |
medium | 6.5 | 0.0022 | 2026-10-30 | A SpaceSupporter could improperly modify an application's start command and buildpack—acti | |
CVE-2026-115274 |
medium | 6.9 | 0.0050 | 2026-10-30 | Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard li | |
CVE-2026-59387 |
high | 8.8 | 0.0023 | 2026-10-30 | The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /int | |
CVE-2026-109821 |
medium | 6.3 | 0.0050 | 2026-10-30 | Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard li | |
CVE-2026-101295 |
high | 7.3 | 0.0014 | 2026-10-30 | Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. Wh | |
CVE-2026-109976 |
medium | 4.7 | 0.0014 | 2026-10-30 | A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon | |
CVE-2026-115456 |
low | 3.7 | 0.0022 | 2026-10-30 | A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a st | |
CVE-2026-65874 |
high | 8.8 | 0.0028 | 2026-10-30 | This issue affects Apache Fineract versions up to and including 1.15.0. The Center read en | |
CVE-2026-82104 |
critical | 9.4 | 0.0039 | 2026-10-30 | In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS de | |
CVE-2026-19730 |
medium | 4.2 | 0.0013 | 2026-10-30 | The 'podman quadlet install --replace' command opens the existing destination file with O_ | |
CVE-2026-113496 |
medium | 5.0 | 0.0014 | 2026-10-30 | A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console | |
CVE-2026-115455 |
medium | 6.5 | 0.0030 | 2026-10-30 | A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a | |
CVE-2026-113495 |
medium | 5.0 | 0.0016 | 2026-10-30 | A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authenticatio | |
CVE-2026-114690 |
medium | 6.2 | 0.0011 | 2026-10-30 | A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstd | |
CVE-2026-114691 |
medium | 5.9 | 0.0040 | 2026-10-30 | A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessi | |
CVE-2026-79705 |
medium | 4.5 | 0.0041 | 2026-10-30 | A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-r | |
CVE-2026-85231 |
medium | 6.5 | 0.0030 | 2026-10-30 | A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerab |