Browse All CVEs
41,824 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-32678 |
high | 8.7 | 0.0037 | 2026-10-29 | Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an at | |
CVE-2026-33280 |
high | 8.6 | 0.0038 | 2026-10-29 | Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an att | |
CVE-2026-33366 |
medium | 6.9 | 0.0039 | 2026-10-29 | Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router product | |
CVE-2026-4948 |
medium | 5.5 | 0.0013 | 2026-10-29 | A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by | |
CVE-2026-0394 |
medium | 5.3 | 0.0043 | 2026-10-29 | When dovecot has been configured to use per-domain passwd files, and they are placed one p | |
CVE-2026-24031 |
high | 8.2 | 0.0040 | 2026-10-29 | Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by ad | |
CVE-2026-27855 |
medium | 5.9 | 0.0032 | 2026-10-29 | Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If au | |
CVE-2026-27856 |
medium | 5.9 | 0.0040 | 2026-10-29 | Doveadm credentials are verified using direct comparison which is susceptible to timing or | |
CVE-2026-27857 |
high | 7.5 | 0.0068 | 2026-10-29 | Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra me | |
CVE-2026-27858 |
— | — | 0.0080 | 2026-10-29 | Attacker can send a specifically crafted message before authentication that causes manages | |
CVE-2026-27859 |
medium | 5.3 | 0.0038 | 2026-10-29 | A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use | |
CVE-2026-27860 |
medium | 5.3 | 0.0030 | 2026-10-29 | If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot | |
CVE-2026-3457 |
high | 7.0 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2023-7339 |
medium | 6.5 | 0.0037 | 2026-10-29 | Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways a | |
CVE-2026-4309 |
medium | 6.3 | 0.0014 | 2026-10-29 | Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker | |
CVE-2026-4619 |
medium | 6.0 | 0.0033 | 2026-10-29 | Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtit | |
CVE-2026-4620 |
high | 7.1 | 0.0101 | 2026-10-29 | OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker t | |
CVE-2026-4621 |
medium | 6.3 | 0.0016 | 2026-10-29 | Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker t | |
CVE-2026-4622 |
high | 7.1 | 0.0088 | 2026-10-29 | OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker t | |
CVE-2026-4982 |
high | 7.3 | 0.0023 | 2026-10-29 | A user with permission "update world" in any Venueless world is able to exfiltrate chat me | |
CVE-2026-32859 |
medium | 5.1 | 0.0020 | 2026-10-29 | ByteDance DeerFlow versions prior to commit 5dbb362 contain a stored cross-site scripting | |
CVE-2026-1496 |
critical | 9.3 | 0.0055 | 2026-10-29 | Vulnerable versions of Coverity Connect lack an error handler in the authentication logic | |
CVE-2026-33205 |
medium | 4.8 | 0.0018 | 2026-10-29 | calibre is a cross-platform e-book manager for viewing, converting, editing, and catalogin | |
CVE-2026-33206 |
high | 8.2 | 0.0022 | 2026-10-29 | calibre is a cross-platform e-book manager for viewing, converting, editing, and catalogin | |
CVE-2026-33284 |
low | 1.2 | 0.0020 | 2026-10-29 | GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the / | |
CVE-2026-33748 |
high | 8.2 | 0.0048 | 2026-10-29 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expre | |
CVE-2026-33750 |
high | 7.5 | 0.0045 | 2026-10-29 | The brace-expansion library generates arbitrary strings containing a common prefix and suf | |
CVE-2026-33755 |
high | 8.8 | 0.0039 | 2026-10-29 | Group-Office is an enterprise customer relationship management and groupware tool. Prior t | |
CVE-2026-33759 |
medium | 5.3 | 0.0031 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `o | |
CVE-2026-33761 |
medium | 5.3 | 0.0040 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, three | |
CVE-2026-33763 |
medium | 5.3 | 0.0033 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `g | |
CVE-2026-33764 |
medium | 4.3 | 0.0022 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the AI | |
CVE-2026-33766 |
medium | 5.3 | 0.0024 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, `isSSR | |
CVE-2026-4953 |
medium | 5.5 | 0.0029 | 2026-10-29 | A weakness has been identified in mingSoft MCMS up to 5.5.0. This issue affects the functi | |
CVE-2026-4954 |
low | 2.1 | 0.0020 | 2026-10-29 | A security vulnerability has been detected in mingSoft MCMS up to 5.5.0. Impacted is the f | |
CVE-2026-4955 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.44. This impa | |
CVE-2026-4956 |
medium | 5.5 | 0.0033 | 2026-10-29 | A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.44. The af | |
CVE-2026-4957 |
low | 2.0 | 0.0029 | 2026-10-29 | A flaw has been found in OpenBMB XAgent 1.0.0. The impacted element is the function Functi | |
CVE-2026-4980 |
medium | 6.3 | 0.0024 | 2026-10-29 | A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 | |
CVE-2026-5010 |
medium | 5.1 | 0.0028 | 2026-10-29 | A reflected Cross-Site Scripting (XSS) vulnerability has been discovered in Clickedu. This | |
CVE-2026-5022 |
medium | 6.3 | 0.0021 | 2026-10-29 | The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authenticat | |
CVE-2023-7340 |
medium | 5.3 | 0.0033 | 2026-10-29 | Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause m | |
CVE-2026-32983 |
medium | 6.9 | 0.0044 | 2026-10-29 | Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an im | |
CVE-2026-4958 |
low | 1.3 | 0.0040 | 2026-10-29 | A vulnerability has been found in OpenBMB XAgent 1.0.0. This affects the function ReplaySe | |
CVE-2026-4959 |
medium | 5.5 | 0.0045 | 2026-10-29 | A vulnerability was found in OpenBMB XAgent 1.0.0. This impacts the function check_user of | |
CVE-2026-28367 |
critical | 9.1 | 0.0072 | 2026-10-29 | A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending | |
CVE-2026-28368 |
critical | 9.1 | 0.0073 | 2026-10-29 | A flaw was found in Undertow. This vulnerability allows a remote attacker to construct spe | |
CVE-2026-28369 |
critical | 9.1 | 0.0069 | 2026-10-29 | A flaw was found in Undertow. When Undertow receives an HTTP request where the first heade | |
CVE-2026-33767 |
high | 7.1 | 0.0052 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, in `ob | |
CVE-2026-33770 |
high | 7.1 | 0.0050 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `f |