Browse All CVEs
46,658 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-6919 |
critical | 9.6 | 0.0029 | 2026-10-29 | Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attac | |
CVE-2026-6920 |
critical | 9.6 | 0.0021 | 2026-10-29 | Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a re | |
CVE-2026-6921 |
high | 8.3 | 0.0019 | 2026-10-29 | Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker | |
CVE-2026-33694 |
high | 7.4 | 0.0015 | 2026-10-29 | This vulnerability allows an attacker to create a junction, enabling the deletion of arbit | |
CVE-2026-40886 |
— | — | 0.0038 | 2026-10-29 | Argo Workflows is an open source container-native workflow engine for orchestrating parall | |
CVE-2026-40894 |
medium | 5.3 | 0.0046 | 2026-10-29 | OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to | |
CVE-2026-41078 |
medium | 5.9 | 0.0022 | 2026-10-29 | OpenTelemetry dotnet is a dotnet telemetry framework. In 1.6.0-rc.1 and earlier, OpenTelem | |
CVE-2026-41173 |
medium | 5.9 | 0.0030 | 2026-10-29 | The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurati | |
CVE-2026-41205 |
high | 7.7 | 0.0036 | 2026-10-29 | Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template | |
CVE-2026-41213 |
medium | 5.9 | 0.0026 | 2026-10-29 | @node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The to | |
CVE-2026-41246 |
— | — | 0.0049 | 2026-10-29 | Contour is a Kubernetes ingress controller using Envoy proxy. From v1.19.0 to before v1.33 | |
CVE-2026-41247 |
high | 8.9 | 0.0157 | 2026-10-29 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Pr | |
CVE-2026-6074 |
critical | 9.3 | 0.0055 | 2026-10-29 | Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerabili | |
CVE-2026-25874 |
critical | 9.3 | 0.1555 | 2026-10-29 | LeRobot through 0.6.1 contains an unsafe deserialization vulnerability in the async infere | |
CVE-2026-41137 |
critical | 9.4 | 0.0145 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41138 |
high | 8.8 | 0.0060 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41264 |
critical | 9.2 | 0.0179 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41265 |
critical | 9.2 | 0.0057 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41266 |
high | 7.7 | 0.0406 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41267 |
critical | 9.8 | 0.0033 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41268 |
critical | 9.8 | 0.1744 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41269 |
high | 8.8 | 0.0047 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41270 |
high | 8.3 | 0.0023 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41271 |
high | 8.3 | 0.0023 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41272 |
high | 7.1 | 0.0026 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41273 |
high | 7.7 | 0.0031 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41275 |
high | 7.5 | 0.0018 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41276 |
high | 7.7 | 0.0687 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41277 |
high | 7.6 | 0.0311 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41278 |
high | 8.7 | 0.0042 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41279 |
high | 8.2 | 0.0026 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-28525 |
high | 8.2 | 0.0032 | 2026-10-29 | SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mon | |
CVE-2026-6375 |
high | 8.7 | 0.0031 | 2026-10-29 | A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger | |
CVE-2026-6376 |
high | 8.7 | 0.0050 | 2026-10-29 | A weakness in SpiceJet’s public booking retrieval page permits full passenger booking deta | |
CVE-2026-6940 |
medium | 6.9 | 0.0022 | 2026-10-29 | radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that al | |
CVE-2026-6941 |
medium | 6.9 | 0.0022 | 2026-10-29 | radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handli | |
CVE-2026-6942 |
critical | 9.3 | 0.0192 | 2026-10-29 | radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that | |
CVE-2026-24303 |
critical | 9.6 | 0.0039 | 2026-10-29 | Improper certificate validation in Microsoft Partner Center allows an unauthorized attacke | |
CVE-2026-26150 |
critical | 10.0 | 0.0057 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to | |
CVE-2026-26210 |
critical | 9.3 | 0.0070 | 2026-10-29 | KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balanc | |
CVE-2026-2708 |
medium | 5.3 | 0.0032 | 2026-10-29 | A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The sou | |
CVE-2026-32172 |
high | 8.0 | 0.0034 | 2026-10-29 | Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker t | |
CVE-2026-32210 |
high | 7.5 | 0.0058 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthoriz | |
CVE-2026-33102 |
critical | 9.3 | 0.0040 | 2026-10-29 | Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized | |
CVE-2026-33819 |
critical | 9.8 | 0.0084 | 2026-10-29 | Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to exe | |
CVE-2026-35431 |
critical | 10.0 | 0.0051 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an | |
CVE-2026-41274 |
critical | 9.3 | 0.0050 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-6732 |
medium | 6.5 | 0.0063 | 2026-10-29 | A flaw was found in libxml2. This vulnerability occurs when the library processes a specia | |
CVE-2026-1789 |
medium | 6.9 | 0.0029 | 2026-10-29 | A vulnerability in the browser-based remote management interface may allow an administrato | |
CVE-2026-25720 |
medium | 6.9 | 0.0028 | 2026-10-29 | A vulnerability exists in SenseLive X3050’s web management interface due to improper sess |