Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-0265 |
high | 7.2 | 0.0105 | 2026-10-29 | An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an u | |
CVE-2026-0264 |
high | 7.2 | 0.0060 | 2026-10-29 | A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Netw | |
CVE-2026-0263 |
high | 7.2 | 0.0037 | 2026-10-29 | A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® soft | |
CVE-2026-0237 |
high | 7.3 | 0.0015 | 2026-10-29 | An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Brows | |
CVE-2026-44577 |
— | — | 0.0074 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 10.0.0 to befo | |
CVE-2026-44576 |
medium | 5.4 | 0.0029 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 14.2.0 to befo | |
CVE-2026-44575 |
— | — | 0.0159 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 15.2.0 to befo | |
CVE-2026-44574 |
— | — | 0.0064 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 15.4.0 to befo | |
CVE-2026-44573 |
— | — | 0.0080 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 12.2.0 to befo | |
CVE-2026-2695 |
medium | 6.3 | 0.0020 | 2026-10-29 | A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (f | |
CVE-2024-48519 |
medium | 6.2 | 0.0011 | 2026-10-29 | Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081 | |
CVE-2026-8367 |
medium | 5.3 | 0.0013 | 2026-10-29 | aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attack | |
CVE-2026-6282 |
high | 8.6 | 0.0039 | 2026-10-29 | A potential improper file path validation vulnerability was reported in some Lenovo Person | |
CVE-2026-6281 |
high | 8.7 | 0.0044 | 2026-10-29 | A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that | |
CVE-2026-45033 |
high | 8.5 | 0.0035 | 2026-10-29 | GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prio | |
CVE-2026-45028 |
low | 2.9 | 0.0014 | 2026-10-29 | Astro is a web framework. Astro versions prior to 6.1.10 used AES-GCM encryption to protec | |
CVE-2026-44665 |
medium | 6.1 | 0.0024 | 2026-10-29 | fast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in at | |
CVE-2026-44664 |
medium | 6.1 | 0.0019 | 2026-10-29 | fast-xml-builder builds XML from JSON. In 1.1.5, the fix for CVE-2026-41650 in fast-xml-pa | |
CVE-2026-44572 |
medium | 5.9 | 0.0030 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 12.2.0 to befo | |
CVE-2026-44470 |
high | 8.5 | 0.0016 | 2026-10-29 | The Claude Desktop app gives you Claude Code with a graphical interface built for running | |
CVE-2026-44467 |
high | 7.4 | 0.0014 | 2026-10-29 | The Claude Desktop app gives you Claude Code with a graphical interface built for running | |
CVE-2026-44459 |
low | 3.8 | 0.0022 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. Prio | |
CVE-2026-44458 |
medium | 4.3 | 0.0020 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. Prio | |
CVE-2026-44457 |
medium | 5.3 | 0.0020 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. Prio | |
CVE-2026-44456 |
medium | 6.5 | 0.0022 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. Prio | |
CVE-2026-44455 |
medium | 6.1 | 0.0014 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. Prio | |
CVE-2026-42946 |
high | 8.3 | 0.0093 | 2026-10-29 | A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that | |
CVE-2026-42945 |
critical | 9.2 | 0.6805 | 2026-10-29 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module modul | |
CVE-2026-42937 |
high | 7.1 | 0.0020 | 2026-10-29 | Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tms | |
CVE-2026-42934 |
medium | 6.3 | 0.0073 | 2026-10-29 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module modul | |
CVE-2026-42930 |
high | 8.5 | 0.0048 | 2026-10-29 | When running in Appliance mode, an authenticated attacker assigned the 'Administrator' rol | |
CVE-2026-42926 |
medium | 6.3 | 0.0035 | 2026-10-29 | When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version | |
CVE-2026-42924 |
high | 8.5 | 0.0025 | 2026-10-29 | An authenticated attacker with the Resource Administrator or Administrator role can create | |
CVE-2026-42920 |
high | 8.7 | 0.0026 | 2026-10-29 | When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual | |
CVE-2026-42919 |
high | 7.1 | 0.0029 | 2026-10-29 | A vulnerability exists in BIG-IP systems that may allow an authenticated attacker with adm | |
CVE-2026-42781 |
high | 7.1 | 0.0018 | 2026-10-29 | When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed | |
CVE-2026-42780 |
medium | 6.9 | 0.0089 | 2026-10-29 | A directory traversal vulnerability exists in BIG-IP SSL Orchestrator that allows an authe | |
CVE-2026-42557 |
high | 8.6 | 0.0049 | 2026-10-29 | jupyterlab is an extensible environment for interactive and reproducible computing, based | |
CVE-2026-42409 |
high | 8.7 | 0.0026 | 2026-10-29 | When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command | |
CVE-2026-42408 |
medium | 6.7 | 0.0008 | 2026-10-29 | When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell (tmsh) | |
CVE-2026-42406 |
high | 8.5 | 0.0015 | 2026-10-29 | A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticat | |
CVE-2026-42063 |
medium | 6.9 | 0.0029 | 2026-10-29 | A vulnerability exists in iControl SOAP where an authenticated attacker with the Resource | |
CVE-2026-42058 |
medium | 5.3 | 0.0019 | 2026-10-29 | An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an in | |
CVE-2026-41959 |
high | 7.1 | 0.0020 | 2026-10-29 | Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tms | |
CVE-2026-41957 |
high | 8.7 | 0.0051 | 2026-10-29 | An authenticated remote code execution vulnerability through undisclosed vectors exists in | |
CVE-2026-41956 |
high | 8.7 | 0.0026 | 2026-10-29 | When a classification profile is configured on a UDP virtual server, undisclosed requests | |
CVE-2026-41954 |
medium | 6.9 | 0.0029 | 2026-10-29 | Sensitive information disclosure vulnerability exists in the undisclosed iControl REST end | |
CVE-2026-41953 |
high | 8.5 | 0.0025 | 2026-10-29 | A vulnerability exists in BIG-IP systems where a highly privileged, authenticated attacker | |
CVE-2026-41227 |
high | 8.7 | 0.0026 | 2026-10-29 | On an HTTP/2 virtual server with Layer 7 DoS Protection configured, undisclosed traffic ca | |
CVE-2026-41225 |
high | 8.6 | 0.0027 | 2026-10-29 | A vulnerability exists in iControl REST where a highly privileged, authenticated attacker |