Browse All CVEs
3,396 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-116231 |
critical | 9.4 | 0.0044 | 2026-10-29 | A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.1. The impacted element | |
CVE-2026-116232 |
critical | 9.4 | 0.0044 | 2026-10-29 | A weakness has been identified in Oray Pugongying X5 Pro 7.6.1. This affects the function | |
CVE-2026-116233 |
critical | 9.4 | 0.0046 | 2026-10-29 | A security vulnerability has been detected in Oray Pugongying X5 Pro 7.6.1. This impacts a | |
CVE-2026-116234 |
critical | 9.4 | 0.0046 | 2026-10-29 | A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown funct | |
CVE-2026-116235 |
critical | 9.4 | 0.0061 | 2026-10-29 | A flaw has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this vulnerability is a | |
CVE-2026-116237 |
critical | 9.3 | 0.0035 | 2026-10-29 | A vulnerability was found in Oray Pugongying X5 Pro 7.6.1. This affects an unknown part of | |
CVE-2026-107092 |
critical | 9.8 | 0.0090 | 2026-10-29 | 1 PoC | NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint. |
CVE-2026-107656 |
critical | 9.8 | 0.0085 | 2026-10-29 | An authentication bypass using an alternate path or channel vulnerability in Fortinet Fort | |
CVE-2026-110475 |
critical | 9.3 | 0.0048 | 2026-10-29 | This vulnerability exists in the CreditNirvana Collections Platform due to improper authen | |
CVE-2026-115188 |
critical | 9.9 | 0.0073 | 2026-10-29 | An unrestricted file upload vulnerability exists in the campaign import feature of Mautic | |
CVE-2026-115693 |
critical | 9.1 | 0.0027 | 2026-10-29 | Improper Certificate Validation vulnerability in hackney_ssl in benoitc hackney allows an | |
CVE-2026-116214 |
critical | 9.3 | 0.0046 | 2026-10-29 | MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allo | |
CVE-2026-116485 |
critical | 9.3 | 0.0235 | 2026-10-29 | danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauth | |
CVE-2026-59106 |
critical | 9.3 | 0.0055 | 2026-10-29 | A security vulnerability has been identified in the WolfProt interface implementation. Ins | |
CVE-2026-59107 |
critical | 9.2 | 0.0036 | 2026-10-29 | A security vulnerability has been identified in the vSolution Matrix file sharing feature. | |
CVE-2026-31158 |
critical | 9.8 | 0.0040 | 2026-10-29 | 1 PoC | SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a re |
CVE-2026-65184 |
critical | 9.8 | 0.0042 | 2026-10-29 | The root-privileged `wsserver` terminal-bridge daemon builds a shell command from client-s | |
CVE-2026-77055 |
critical | 9.3 | 0.0009 | 2026-10-29 | boneIO black_debian_images gives the boneio service account excessive privileges, includin | |
CVE-2026-93328 |
critical | 9.3 | 0.0053 | 2026-10-29 | Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolb | |
CVE-2026-112346 |
critical | 9.3 | 0.0101 | 2026-10-29 | OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code executi | |
CVE-2026-115905 |
critical | 10.0 | 0.0032 | 2026-10-29 | zip is a zip library for Rust that supports reading and writing simple ZIP files. Through | |
CVE-2026-102649 |
critical | 9.9 | 0.0046 | 2026-10-29 | Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator. Prio | |
CVE-2026-10757 |
critical | 9.8 | 0.0044 | 2026-10-29 | There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on | |
CVE-2026-115915 |
critical | 9.8 | 0.0066 | 2026-10-29 | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageM | |
CVE-2026-110720 |
critical | 9.9 | 0.0037 | 2026-10-29 | Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization byp | |
CVE-2026-116508 |
critical | 9.3 | 0.0061 | 2026-10-29 | A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by | |
CVE-2026-116747 |
critical | 9.2 | 0.0062 | 2026-10-29 | Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unau | |
CVE-2026-18450 |
critical | 9.8 | 0.0040 | 2026-10-29 | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands | |
CVE-2026-92885 |
critical | 9.8 | 0.0037 | 2026-10-29 | The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to | |
CVE-2026-102788 |
critical | 9.3 | 0.0039 | 2026-10-29 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On | |
CVE-2026-102789 |
critical | 9.3 | 0.0032 | 2026-10-29 | Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in | |
CVE-2026-76932 |
critical | 9.4 | 0.0045 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This | |
CVE-2026-76933 |
critical | 9.4 | 0.0045 | 2026-10-29 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This i | |
CVE-2026-76934 |
critical | 9.8 | 0.0052 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This | |
CVE-2026-76935 |
critical | 9.4 | 0.0033 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This | |
CVE-2026-76936 |
critical | 9.4 | 0.0045 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This | |
CVE-2026-76937 |
critical | 9.4 | 0.0045 | 2026-10-29 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This | |
CVE-2026-76938 |
critical | 9.8 | 0.0064 | 2026-10-29 | Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue | |
CVE-2026-76939 |
critical | 9.8 | 0.0052 | 2026-10-29 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This i | |
CVE-2026-82116 |
critical | 9.8 | 0.0061 | 2026-10-29 | Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects | |
CVE-2026-82117 |
critical | 9.8 | 0.0064 | 2026-10-29 | Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server | |
CVE-2026-82118 |
critical | 9.8 | 0.0052 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Vers | |
CVE-2026-82119 |
critical | 9.8 | 0.0105 | 2026-10-29 | OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: | |
CVE-2026-82120 |
critical | 9.8 | 0.0036 | 2026-10-29 | Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Versi | |
CVE-2026-82122 |
critical | 9.4 | 0.0045 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Vers | |
CVE-2026-86574 |
critical | 9.8 | 0.0052 | 2026-10-29 | Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 1 | |
CVE-2026-86575 |
critical | 9.4 | 0.0045 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integra | |
CVE-2026-86576 |
critical | 9.4 | 0.0045 | 2026-10-29 | Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrat | |
CVE-2026-86577 |
critical | 9.4 | 0.0046 | 2026-10-29 | Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Mana | |
CVE-2026-117532 |
critical | 9.3 | 0.0068 | 2026-10-29 | REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in th |