Browse All CVEs
10,708 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-66324 |
medium | 6.5 | 0.0092 | 2026-10-29 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unautho | |
CVE-2026-66798 |
medium | 4.3 | 0.0079 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2024-58379 |
medium | 6.9 | 0.0042 | 2026-10-29 | nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in e | |
CVE-2025-63607 |
medium | 6.1 | 0.0026 | 2026-10-29 | TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the applica | |
CVE-2024-3773 |
medium | 5.9 | 0.0024 | 2026-10-29 | The LiveJournal Shortcode WordPress plugin through 1.1.1 does not validate and escape some | |
CVE-2026-14255 |
medium | 5.5 | 0.0016 | 2026-10-29 | A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger | |
CVE-2026-18330 |
medium | 6.1 | 0.0033 | 2026-10-29 | A hard-coded cryptographic key vulnerability exists in TP-Link RE305 V3 and Archer C7 V5. | |
CVE-2026-86332 |
medium | 6.5 | 0.0042 | 2026-10-29 | A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route | |
CVE-2026-89092 |
medium | 4.2 | 0.0024 | 2026-10-29 | The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow whe | |
CVE-2024-12145 |
medium | 4.3 | 0.0029 | 2026-10-29 | The BuddyPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in a | |
CVE-2025-69904 |
medium | 4.9 | 0.0047 | 2026-10-29 | Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrato | |
CVE-2026-15396 |
medium | 6.5 | 0.0037 | 2026-10-29 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liber | |
CVE-2026-15412 |
medium | 6.5 | 0.0034 | 2026-10-29 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liber | |
CVE-2026-15634 |
medium | 6.5 | 0.0037 | 2026-10-29 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liber | |
CVE-2026-90848 |
medium | 5.3 | 0.0047 | 2026-10-29 | A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknow | |
CVE-2025-11395 |
medium | 5.5 | 0.0044 | 2026-10-29 | A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman l | |
CVE-2026-19662 |
medium | 5.9 | 0.0046 | 2026-10-29 | An attacker may be able to cause a `named` resolver to abort. The attack requires inducing | |
CVE-2026-19941 |
medium | 5.9 | 0.0023 | 2026-10-29 | An inapplicable NSEC record may be accepted by a `named` resolver as proof that no wildcar | |
CVE-2026-78301 |
medium | 5.8 | 0.0021 | 2026-10-29 | A malformed zone may contain an NS or DNAME node above its origin, which `named` treats as | |
CVE-2026-19033 |
medium | 6.5 | 0.0024 | 2026-10-29 | For a secondary zone with transfers restricted by TSIG, `named` may start to serve the dat | |
CVE-2026-19668 |
medium | 5.3 | 0.0048 | 2026-10-29 | A BIND recursive resolver may experience excessive resource consumption if it encounters l | |
CVE-2026-75029 |
medium | 5.3 | 0.0048 | 2026-10-29 | In a query response, an attacker may send `named` multiple copies of a record that should | |
CVE-2026-77119 |
medium | 5.9 | 0.0023 | 2026-10-29 | A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity pro | |
CVE-2026-10841 |
medium | 4.8 | 0.0024 | 2026-10-29 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liber | |
CVE-2026-11548 |
medium | 4.8 | 0.0025 | 2026-10-29 | IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - L | |
CVE-2026-11549 |
medium | 6.5 | 0.0033 | 2026-10-29 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liber | |
CVE-2026-11722 |
medium | 4.8 | 0.0025 | 2026-10-29 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liber | |
CVE-2026-98090 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active | |
CVE-2026-98091 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed | |
CVE-2026-98092 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: yc: fix me | |
CVE-2026-98094 |
medium | 5.5 | 0.0009 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: make | |
CVE-2026-98095 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast | |
CVE-2026-98097 |
medium | 5.3 | 0.0031 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send rando | |
CVE-2026-98098 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref | |
CVE-2026-98099 |
medium | 4.7 | 0.0009 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu_ | |
CVE-2026-98113 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unm | |
CVE-2026-98114 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL | |
CVE-2026-98119 |
medium | 5.5 | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: netfs: break unbuffer | |
CVE-2026-98120 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref | |
CVE-2026-98121 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fi | |
CVE-2026-98123 |
medium | 5.5 | 0.0009 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup | |
CVE-2026-98124 |
medium | 5.5 | 0.0019 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidat | |
CVE-2026-98125 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale | |
CVE-2026-98126 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: smb/client: validate | |
CVE-2026-98127 |
medium | 5.5 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: smb/client: validate | |
CVE-2026-98128 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix tar | |
CVE-2026-98129 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NUL | |
CVE-2026-98140 |
medium | 5.5 | 0.0010 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local | |
CVE-2026-98141 |
medium | 5.5 | 0.0010 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate repar | |
CVE-2026-98142 |
medium | 5.5 | 0.0011 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/cirrus-qemu: Vali |