Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42582 |
high | 7.5 | 0.0044 | 2026-10-29 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Fina | |
CVE-2026-42580 |
medium | 6.5 | 0.0038 | 2026-10-29 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Fina | |
CVE-2026-33585 |
low | 3.8 | 0.0013 | 2026-10-29 | Improper management of the idle timeout parameter in the Keycloak interface of the Arqit S | |
CVE-2026-33584 |
medium | 5.3 | 0.0031 | 2026-10-29 | Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables | |
CVE-2026-33583 |
high | 8.7 | 0.0021 | 2026-10-29 | Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) a | |
CVE-2026-30906 |
high | 7.8 | 0.0012 | 2026-10-29 | Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may | |
CVE-2026-30905 |
high | 7.8 | 0.0012 | 2026-10-29 | External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal I | |
CVE-2026-30904 |
medium | 4.3 | 0.0014 | 2026-10-29 | Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an a | |
CVE-2026-22677 |
medium | 6.0 | 0.0038 | 2026-10-29 | Hermes WebUI prior to 0.51.44 contains a path traversal vulnerability in the session impor | |
CVE-2026-0262 |
medium | 6.6 | 0.0036 | 2026-10-29 | Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an | |
CVE-2026-0261 |
medium | 6.1 | 0.0140 | 2026-10-29 | Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable a | |
CVE-2026-0259 |
medium | 5.0 | 0.0034 | 2026-10-29 | An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and | |
CVE-2026-0258 |
medium | 4.8 | 0.0033 | 2026-10-29 | A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alt | |
CVE-2026-0257 |
high | 7.8 | 0.9564 | 2026-10-29 | KEV | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows atta |
CVE-2026-0256 |
medium | 4.4 | 0.0016 | 2026-10-29 | A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software e | |
CVE-2026-0251 |
medium | 5.9 | 0.0019 | 2026-10-29 | Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtec | |
CVE-2026-0250 |
medium | 5.2 | 0.0039 | 2026-10-29 | A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that e | |
CVE-2026-0249 |
medium | 4.9 | 0.0011 | 2026-10-29 | Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalP | |
CVE-2026-0248 |
medium | 6.2 | 0.0019 | 2026-10-29 | An improper certificate validation vulnerability in the Prisma Access Agent® for Android a | |
CVE-2026-0247 |
medium | 5.9 | 0.0015 | 2026-10-29 | Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Acce | |
CVE-2026-0246 |
medium | 5.9 | 0.0015 | 2026-10-29 | A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Acc | |
CVE-2026-0245 |
medium | 4.3 | 0.0014 | 2026-10-29 | Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user | |
CVE-2026-0244 |
medium | 5.2 | 0.0022 | 2026-10-29 | An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN I | |
CVE-2026-0242 |
medium | 6.1 | 0.0025 | 2026-10-29 | A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attac | |
CVE-2026-0241 |
medium | 5.1 | 0.0034 | 2026-10-29 | Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to | |
CVE-2026-0240 |
medium | 4.5 | 0.0024 | 2026-10-29 | An information disclosure vulnerability in Trust Protection Foundation enables an authenti | |
CVE-2026-0239 |
medium | 4.9 | 0.0017 | 2026-10-29 | An information disclosure vulnerability in the Chronosphere Chronocollector enables an una | |
CVE-2026-0238 |
low | 1.1 | 0.0010 | 2026-10-29 | A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to i | |
CVE-2026-0236 |
high | 7.3 | 0.0016 | 2026-10-29 | A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to pro | |
CVE-2026-0235 |
medium | 5.8 | 0.0011 | 2026-10-29 | A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally aut | |
CVE-2026-45411 |
— | — | 0.0057 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.3, it is possible to catch a h | |
CVE-2026-45109 |
high | 7.5 | 0.0085 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 15.2.0 to befo | |
CVE-2026-44582 |
low | 3.7 | 0.0022 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 13.4.6 to befo | |
CVE-2026-44581 |
medium | 4.7 | 0.0023 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 13.4.0 to befo | |
CVE-2026-44580 |
medium | 6.1 | 0.0022 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 13.0.0 to befo | |
CVE-2026-44579 |
— | — | 0.0075 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From to before 15. | |
CVE-2026-44578 |
— | — | 0.3554 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 13.4.13 to bef | |
CVE-2026-44009 |
critical | 9.8 | 0.0101 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, VM2 suffers from a sandbox | |
CVE-2026-44008 |
critical | 9.8 | 0.0089 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeAr | |
CVE-2026-44007 |
critical | 9.1 | 0.0100 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created wi | |
CVE-2026-44006 |
— | — | 0.0081 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach Bas | |
CVE-2026-44005 |
— | — | 0.0083 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes m | |
CVE-2026-44004 |
— | — | 0.0042 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, sandboxed code can call Buf | |
CVE-2026-44003 |
medium | 5.8 | 0.0025 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's code transformer has | |
CVE-2026-44002 |
medium | 5.8 | 0.0024 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's CallSite wrapper clas | |
CVE-2026-44001 |
— | — | 0.0045 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, a sandbox escape vulnerabil | |
CVE-2026-44000 |
high | 7.2 | 0.0020 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, a sandbox boundary violatio | |
CVE-2026-43999 |
— | — | 0.0097 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, NodeVM's builtin allowlist | |
CVE-2026-43998 |
— | — | 0.0072 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. In 3.10.5, NodeVM's require.root path restri | |
CVE-2026-43997 |
— | — | 0.0098 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, it is possible to obtain th |