Browse All CVEs
50,426 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-50632 |
— | — | 0.0070 | 2026-10-29 | A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configurati | |
CVE-2026-50631 |
high | 7.4 | 0.0027 | 2026-10-29 | A race condition in AbstractOAuthDataProvider allows concurrent requests using the same Re | |
CVE-2026-50630 |
medium | 6.5 | 0.0037 | 2026-10-29 | A CRLF injection vulnerability exists in the OAuth2 AuthorizationUtils class. When constru | |
CVE-2026-50629 |
medium | 5.3 | 0.0044 | 2026-10-29 | The 'clientId' parameter from incoming HTTP requests is directly concatenated into OAuth2 | |
CVE-2026-50628 |
critical | 9.8 | 0.0073 | 2026-10-29 | A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound | |
CVE-2026-50627 |
critical | 9.1 | 0.0412 | 2026-10-29 | The JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) cla | |
CVE-2026-50623 |
medium | 4.8 | 0.0037 | 2026-10-29 | An authentication bypass vulnerability exists in the OAuth2 TokenIntrospectionService in A | |
CVE-2026-49875 |
critical | 9.8 | 0.0053 | 2026-10-29 | Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParse | |
CVE-2026-11847 |
medium | 5.3 | 0.0029 | 2026-10-29 | The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path T | |
CVE-2026-11846 |
high | 7.2 | 0.0040 | 2026-10-29 | The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitr | |
CVE-2026-11845 |
high | 8.6 | 0.0095 | 2026-10-29 | The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Comma | |
CVE-2026-11844 |
medium | 6.9 | 0.0041 | 2026-10-29 | The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrar | |
CVE-2026-12058 |
medium | 5.3 | 0.0017 | 2026-10-29 | The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed. | |
CVE-2026-11535 |
critical | 9.4 | 0.0015 | 2026-10-29 | An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be e | |
CVE-2026-12060 |
medium | 6.9 | 0.0031 | 2026-10-29 | Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerab | |
CVE-2026-12059 |
high | 8.7 | 0.0045 | 2026-10-29 | The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerab | |
CVE-2026-45169 |
high | 8.7 | 0.0035 | 2026-10-29 | Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, | |
CVE-2026-47367 |
critical | 9.9 | 0.0083 | 2026-10-29 | A malicious actor with access to the network and low privileges could exploit an Improper | |
CVE-2026-47365 |
critical | 9.9 | 0.0041 | 2026-10-29 | Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WH | |
CVE-2026-20746 |
medium | 6.3 | 0.0028 | 2026-10-29 | Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only | |
CVE-2026-45170 |
high | 7.5 | 0.0010 | 2026-10-29 | Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditio | |
CVE-2026-49482 |
medium | 4.3 | 0.0020 | 2026-10-29 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #141, Cli | |
CVE-2026-47238 |
medium | 6.5 | 0.0024 | 2026-10-29 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a n | |
CVE-2026-45418 |
high | 8.8 | 0.0037 | 2026-10-29 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #132, any | |
CVE-2026-45060 |
critical | 9.8 | 0.0044 | 2026-10-29 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #129, the | |
CVE-2026-42846 |
critical | 9.8 | 0.0073 | 2026-10-29 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #140, Cli | |
CVE-2026-6250 |
high | 7.0 | 0.0046 | 2026-10-29 | An authenticated format string vulnerability exists in the ONVIF service of Tapo C110 v2 d | |
CVE-2026-49060 |
critical | 9.8 | 0.0184 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows P | |
CVE-2026-45174 |
high | 8.5 | 0.0013 | 2026-10-29 | Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker | |
CVE-2026-45173 |
high | 8.4 | 0.0016 | 2026-10-29 | Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8 | |
CVE-2026-45172 |
high | 8.7 | 0.0055 | 2026-10-29 | Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) vers | |
CVE-2026-45171 |
high | 8.7 | 0.0054 | 2026-10-29 | Incomplete input validation and improperly configured folder permissions within Idira Priv | |
CVE-2026-42653 |
high | 7.1 | 0.0014 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42647 |
critical | 9.3 | 0.0132 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-39494 |
critical | 9.3 | 0.0039 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-12035 |
high | 8.8 | 0.0019 | 2026-10-29 | Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remo | |
CVE-2026-12034 |
high | 8.3 | 0.0018 | 2026-10-29 | Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Li | |
CVE-2026-12033 |
medium | 5.3 | 0.0019 | 2026-10-29 | Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remo | |
CVE-2026-12032 |
low | 3.1 | 0.0015 | 2026-10-29 | Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827. | |
CVE-2026-12031 |
high | 8.3 | 0.0019 | 2026-10-29 | Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 | |
CVE-2026-12030 |
high | 8.3 | 0.0018 | 2026-10-29 | Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a r | |
CVE-2026-12029 |
high | 8.3 | 0.0019 | 2026-10-29 | Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remo | |
CVE-2026-12028 |
high | 8.3 | 0.0023 | 2026-10-29 | Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote | |
CVE-2026-12027 |
critical | 9.6 | 0.0022 | 2026-10-29 | Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed | |
CVE-2026-12026 |
medium | 6.5 | 0.0024 | 2026-10-29 | Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a | |
CVE-2026-12025 |
medium | 5.3 | 0.0023 | 2026-10-29 | Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827 | |
CVE-2026-12024 |
medium | 6.5 | 0.0016 | 2026-10-29 | Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allow | |
CVE-2026-12023 |
high | 8.3 | 0.0023 | 2026-10-29 | Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote att | |
CVE-2026-12022 |
high | 8.3 | 0.0017 | 2026-10-29 | Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote att | |
CVE-2026-12020 |
high | 8.8 | 0.0022 | 2026-10-29 | Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remot |