Browse All CVEs
10,585 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-75145 |
medium | 5.8 | 0.0016 | 2026-10-29 | FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 | |
CVE-2026-75147 |
medium | 6.9 | 0.0012 | 2026-10-29 | FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer (lib | |
CVE-2026-18874 |
medium | 6.2 | 0.0054 | 2026-10-29 | A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inj | |
CVE-2026-19653 |
medium | 5.5 | 0.0013 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a deni | |
CVE-2026-55648 |
medium | 6.1 | 0.0043 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, freerdp_ | |
CVE-2026-63117 |
medium | 6.5 | 0.0055 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, an authe | |
CVE-2026-49870 |
medium | 5.9 | 0.0040 | 2026-10-29 | Snipe-IT is an IT asset/license management system. Prior to 8.6.1, POST /two-factor has no | |
CVE-2026-75619 |
medium | 6.9 | 0.0042 | 2026-10-29 | Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. | |
CVE-2026-16825 |
medium | 4.2 | 0.0033 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker | |
CVE-2026-16827 |
medium | 5.9 | 0.0044 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16829 |
medium | 5.3 | 0.0025 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16833 |
medium | 5.3 | 0.0040 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose ke | |
CVE-2026-16846 |
medium | 6.5 | 0.0031 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16849 |
medium | 4.3 | 0.0028 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16855 |
medium | 5.5 | 0.0013 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a deni | |
CVE-2026-16866 |
medium | 4.8 | 0.0034 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16883 |
medium | 5.5 | 0.0015 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensi | |
CVE-2026-16886 |
medium | 4.3 | 0.0028 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16897 |
medium | 4.4 | 0.0014 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a deni | |
CVE-2026-16914 |
medium | 6.7 | 0.0017 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbi | |
CVE-2026-67189 |
medium | 5.3 | 0.0117 | 2026-10-29 | pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripti | |
CVE-2026-68559 |
medium | 6.5 | 0.0040 | 2026-10-29 | Wekan is open source kanban built with Meteor. From 9.57 until 9.74, the /api/boards/:boar | |
CVE-2026-68901 |
medium | 6.5 | 0.0053 | 2026-10-29 | Wekan is open source kanban built with Meteor. Prior to 10.38, the /api/boards/:boardId/ex | |
CVE-2026-54492 |
medium | 4.3 | 0.0041 | 2026-10-29 | Koel is a free, open-source music streaming solution. Prior to 9.7.0, the Subsonic-compati | |
CVE-2026-54494 |
medium | 5.3 | 0.0043 | 2026-10-29 | Koel is a free, open-source music streaming solution. Prior to 9.7.1, App\Helpers\Network: | |
CVE-2026-68552 |
medium | 5.3 | 0.0052 | 2026-10-29 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an u | |
CVE-2026-68555 |
medium | 6.5 | 0.0053 | 2026-10-29 | Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authent | |
CVE-2026-76827 |
medium | 6.8 | 0.0053 | 2026-10-29 | A flaw was found in search-indexer. This vulnerability allows a registered and authenticat | |
CVE-2026-59992 |
medium | 5.4 | 0.0038 | 2026-10-29 | Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacm | |
CVE-2026-63123 |
medium | 6.5 | 0.0026 | 2026-10-29 | Tina is a headless content management system. Prior to 2.5.2, the TinaCMS CLI package's Vi | |
CVE-2026-76256 |
medium | 4.3 | 0.0030 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-76257 |
medium | 6.5 | 0.0034 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-76258 |
medium | 6.5 | 0.0034 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-76261 |
medium | 6.5 | 0.0029 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-76327 |
medium | 6.4 | 0.0026 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-76347 |
medium | 5.4 | 0.0029 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-76376 |
medium | 4.3 | 0.0019 | 2026-10-29 | In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with p | |
CVE-2026-76383 |
medium | 4.3 | 0.0021 | 2026-10-29 | In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a u | |
CVE-2026-76384 |
medium | 4.3 | 0.0019 | 2026-10-29 | In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR, a user wh | |
CVE-2026-76390 |
medium | 5.3 | 0.0039 | 2026-10-29 | In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthe | |
CVE-2026-75628 |
medium | 5.7 | 0.0050 | 2026-10-29 | Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect afte | |
CVE-2026-76783 |
medium | 5.5 | 0.0041 | 2026-10-29 | A security vulnerability has been detected in DeDeCMS 53_1_UTF8. This vulnerability affect | |
CVE-2026-77014 |
medium | 5.3 | 0.0023 | 2026-10-29 | A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() c | |
CVE-2026-73196 |
medium | 6.5 | 0.0043 | 2026-10-29 | A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerabi | |
CVE-2026-73199 |
medium | 6.5 | 0.0035 | 2026-10-29 | A flaw was found in the `ipa-enrollment` SLAPI plugin. A remote authenticated client can e | |
CVE-2026-64961 |
medium | 6.3 | 0.0048 | 2026-10-29 | ATutor is vulnerable to authentication bypass . Although a token validation check is prese | |
CVE-2026-64962 |
medium | 5.1 | 0.0022 | 2026-10-29 | ATutor is vulnerable to Cross-Site Request Forgery (CSRF) in profile update functionality. | |
CVE-2026-64964 |
medium | 6.3 | 0.0037 | 2026-10-29 | ATutor generates predictable email confirmation tokens due to the use of insufficiently ra | |
CVE-2026-64965 |
medium | 5.3 | 0.0039 | 2026-10-29 | ATutor is vulnerable to Missing Authorization Check on Test and Question Import endpoints. | |
CVE-2026-64967 |
medium | 6.9 | 0.0049 | 2026-10-29 | A path traversal vulnerability in ATutor's error log viewer allows an attacker with admini |