Browse All CVEs
50,426 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-12019 |
high | 8.3 | 0.0025 | 2026-10-29 | Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827. | |
CVE-2026-12018 |
high | 8.8 | 0.0016 | 2026-10-29 | Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 a | |
CVE-2026-12017 |
low | 3.1 | 0.0021 | 2026-10-29 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowe | |
CVE-2026-12016 |
high | 8.3 | 0.0023 | 2026-10-29 | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed | |
CVE-2026-12015 |
medium | 5.3 | 0.0023 | 2026-10-29 | Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attac | |
CVE-2026-12014 |
high | 8.3 | 0.0017 | 2026-10-29 | Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the | |
CVE-2026-12012 |
high | 8.1 | 0.0022 | 2026-10-29 | Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in | |
CVE-2026-12011 |
high | 8.3 | 0.0025 | 2026-10-29 | Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a re | |
CVE-2026-12010 |
high | 8.3 | 0.0026 | 2026-10-29 | Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a | |
CVE-2026-12009 |
high | 8.3 | 0.0025 | 2026-10-29 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior | |
CVE-2026-12008 |
high | 8.3 | 0.0025 | 2026-10-29 | Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a re | |
CVE-2026-12007 |
high | 8.8 | 0.0029 | 2026-10-29 | Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remot | |
CVE-2026-53782 |
medium | 6.3 | 0.0026 | 2026-10-29 | Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows a | |
CVE-2026-53781 |
medium | 5.3 | 0.0032 | 2026-10-29 | Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote at | |
CVE-2026-49973 |
critical | 9.2 | 0.0054 | 2026-10-29 | Hermes WebUI before version 0.51.358 contains an improper access control vulnerability tha | |
CVE-2026-49949 |
medium | 6.0 | 0.0025 | 2026-10-29 | CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network- | |
CVE-2026-45802 |
medium | 6.0 | 0.0026 | 2026-10-29 | FPDI is a collection of PHP classes that facilitate reading pages from existing PDF docume | |
CVE-2026-45175 |
high | 8.5 | 0.0013 | 2026-10-29 | Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access cont | |
CVE-2026-47250 |
medium | 6.1 | 0.0042 | 2026-10-29 | mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management | |
CVE-2026-47189 |
high | 8.3 | 0.0039 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47188 |
low | 2.3 | 0.0030 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47181 |
high | 8.7 | 0.0031 | 2026-10-29 | PenguinMod-BackendApi is the backend api for penguinmod. Prior to version 1.0.0, a NoSQL i | |
CVE-2026-47177 |
medium | 5.7 | 0.0032 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47176 |
medium | 5.7 | 0.0032 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47175 |
low | 2.3 | 0.0030 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47174 |
critical | 9.5 | 0.0039 | 2026-10-29 | In Duck Site before version 1.0.1, the repository has a deploy workflow that runs after th | |
CVE-2026-47173 |
medium | 6.3 | 0.0033 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47172 |
critical | 9.5 | 0.0041 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47171 |
high | 8.8 | 0.0041 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47170 |
high | 7.7 | 0.0021 | 2026-10-29 | Garlic-Hub manages digital signage network — devices, content, and playlists — from a sing | |
CVE-2026-47169 |
high | 7.5 | 0.0030 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47163 |
high | 7.2 | 0.0027 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-46519 |
high | 8.8 | 0.0051 | 2026-10-29 | mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management | |
CVE-2026-45178 |
high | 8.4 | 0.0036 | 2026-10-29 | Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access contro | |
CVE-2026-45177 |
critical | 9.1 | 0.0050 | 2026-10-29 | Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control with | |
CVE-2026-45176 |
high | 8.9 | 0.0012 | 2026-10-29 | Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access cont | |
CVE-2026-49261 |
critical | 9.8 | 0.0158 | 2026-10-29 | MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6 | |
CVE-2026-48546 |
high | 8.5 | 0.0049 | 2026-10-29 | KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to | |
CVE-2026-47157 |
medium | 6.5 | 0.0019 | 2026-10-29 | aiograpi is an asynchronous Instagram API for Python. aiograpi versions before 0.9.10 acce | |
CVE-2026-3329 |
high | 8.7 | 0.0045 | 2026-10-29 | A remote unauthenticated attacker may be able to conduct credential-guessing attacks again | |
CVE-2026-49982 |
high | 8.2 | 0.0050 | 2026-10-29 | tmp is a temporary file and directory creator for node.js. In version 0.2.6, the _assertPa | |
CVE-2026-44705 |
high | 7.7 | 0.0043 | 2026-10-29 | tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm pac | |
CVE-2026-11945 |
high | 7.5 | 0.0025 | 2026-10-29 | PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privil | |
CVE-2026-9648 |
critical | 9.1 | 0.0022 | 2026-10-29 | The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowi | |
CVE-2026-7870 |
high | 8.8 | 0.0034 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqu | |
CVE-2026-7787 |
high | 8.1 | 0.0025 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify s | |
CVE-2026-53777 |
high | 8.6 | 0.0047 | 2026-10-29 | Perry before 0.5.1159 contains a path traversal vulnerability that allows a malicious buil | |
CVE-2026-4096 |
medium | 6.1 | 0.0015 | 2026-10-29 | IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by impr | |
CVE-2026-3341 |
medium | 5.4 | 0.0014 | 2026-10-29 | IBM Langflow Desktop 1.0.0 through 1.9.2 IBM Langflow is vulnerable to server-side request | |
CVE-2026-11839 |
critical | 9.9 | 0.0034 | 2026-10-29 | Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Tec |