Browse All CVEs
34,370 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-119280 |
low | 3.7 | 0.0031 | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-119279 |
medium | 5.9 | 0.0035 | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-110073 |
medium | 5.4 | 0.0036 | 2026-10-29 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability | |
CVE-2026-110074 |
medium | 5.4 | 0.0019 | 2026-10-29 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerabili | |
CVE-2026-119198 |
medium | 5.9 | 0.0029 | 2026-10-29 | Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, a cli | |
CVE-2026-119199 |
medium | 5.9 | 0.0035 | 2026-10-29 | Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the N | |
CVE-2026-93588 |
low | 2.3 | 0.0027 | 2026-10-29 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in th | |
CVE-2026-93589 |
medium | 6.3 | 0.0034 | 2026-10-29 | ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF enc | |
CVE-2026-93586 |
low | 2.1 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability i | |
CVE-2026-93587 |
medium | 4.8 | 0.0012 | 2026-10-29 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD (and, | |
CVE-2026-92587 |
medium | 5.3 | 0.0031 | 2026-10-29 | n8n is a workflow automation platform. In versions before 1.123.76, 2.37.7, and 2.38.2, th | |
CVE-2026-92588 |
medium | 5.9 | 0.0032 | 2026-10-29 | n8n is a workflow automation platform. In n8n versions before 1.123.76, 2.37.7, and 2.38.2 | |
CVE-2026-90931 |
medium | 5.1 | 0.0024 | 2026-10-29 | 1 PoC | LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media |
CVE-2026-90932 |
high | 8.6 | 0.0082 | 2026-10-29 | 1 PoC | LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the c |
CVE-2026-86424 |
low | 2.0 | 0.0014 | 2026-10-29 | ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vu | |
CVE-2026-86425 |
medium | 4.8 | 0.0015 | 2026-10-29 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vuln | |
CVE-2026-86422 |
low | 1.0 | 0.0013 | 2026-10-29 | ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path pol | |
CVE-2026-86423 |
medium | 4.8 | 0.0011 | 2026-10-29 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vuln | |
CVE-2026-86420 |
medium | 6.3 | 0.0032 | 2026-10-29 | ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when a | |
CVE-2026-86421 |
medium | 6.3 | 0.0045 | 2026-10-29 | ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. | |
CVE-2026-85172 |
medium | 5.3 | 0.0026 | 2026-10-29 | n8n versions before 2.34.1 contain a server-side request forgery vulnerability in the lega | |
CVE-2026-85173 |
medium | 5.3 | 0.0035 | 2026-10-29 | n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in th | |
CVE-2026-85170 |
high | 7.1 | 0.0040 | 2026-10-29 | n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail (v1) an | |
CVE-2026-85171 |
high | 7.1 | 0.0056 | 2026-10-29 | n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in th | |
CVE-2026-85168 |
high | 7.7 | 0.0083 | 2026-10-29 | 1 PoC | n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerabi |
CVE-2026-85169 |
high | 8.7 | 0.0088 | 2026-10-29 | n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in t | |
CVE-2026-85166 |
high | 7.2 | 0.0036 | 2026-10-29 | n8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the | |
CVE-2026-85167 |
medium | 6.3 | 0.0040 | 2026-10-29 | n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the | |
CVE-2026-84807 |
medium | 5.3 | 0.0025 | 2026-10-29 | Kimai (kimai/kimai) before 2.65.0 contains a business logic / improper authorization vulne | |
CVE-2026-85165 |
high | 7.2 | 0.0057 | 2026-10-29 | n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free i | |
CVE-2026-81694 |
critical | 9.3 | 0.0025 | 2026-10-29 | openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from unt | |
CVE-2026-82854 |
critical | 9.3 | 0.0198 | 2026-10-29 | Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized en | |
CVE-2026-73051 |
medium | 6.3 | 0.0057 | 2026-10-29 | actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the H | |
CVE-2026-72831 |
high | 8.7 | 0.0086 | 2026-10-29 | The Flex Objects plugin (through 1.4.6, tested with Grav 2.0.11) contains an incorrect aut | |
CVE-2026-72832 |
medium | 5.1 | 0.0031 | 2026-10-29 | Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerabilit | |
CVE-2026-72825 |
high | 7.2 | 0.0035 | 2026-10-29 | The getgrav/grav-plugin-api plugin before 1.0.13 contains an API-key scope cap bypass in t | |
CVE-2026-72826 |
high | 8.7 | 0.0047 | 2026-10-29 | The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a ne | |
CVE-2026-72813 |
medium | 6.9 | 0.0049 | 2026-10-29 | actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty | |
CVE-2026-67312 |
medium | 6.3 | 0.0052 | 2026-10-29 | axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled | |
CVE-2026-63308 |
medium | 5.3 | 0.0049 | 2026-10-29 | Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in | |
CVE-2026-61871 |
medium | 6.3 | 0.0035 | 2026-10-29 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that | |
CVE-2026-61872 |
low | 2.0 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when | |
CVE-2026-61869 |
low | 2.1 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that | |
CVE-2026-61870 |
low | 2.1 | 0.0019 | 2026-10-29 | ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when | |
CVE-2026-61865 |
low | 2.1 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the hough lines operat | |
CVE-2026-61868 |
medium | 6.3 | 0.0022 | 2026-10-29 | ImageMagick before 7.1.2-26 and 6.9.x before 6.9.13-51 contains a memory leak in the YUV d | |
CVE-2026-61863 |
low | 2.1 | 0.0019 | 2026-10-29 | ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF | |
CVE-2026-61864 |
low | 2.1 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation t | |
CVE-2026-61861 |
medium | 6.3 | 0.0055 | 2026-10-29 | ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCap | |
CVE-2026-61862 |
low | 2.1 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability |