Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-44612 |
high | 8.4 | 0.0012 | 2026-10-29 | Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads | |
CVE-2026-32661 |
critical | 9.3 | 0.0047 | 2026-10-29 | Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWAL | |
CVE-2026-21024 |
medium | 6.3 | 0.0009 | 2026-10-29 | Improper privilege management in Samsung System Support Service prior to version 8.0.8.0 a | |
CVE-2026-21022 |
medium | 6.9 | 0.0009 | 2026-10-29 | Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 | |
CVE-2026-21021 |
medium | 5.1 | 0.0021 | 2026-10-29 | Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical atta | |
CVE-2026-21020 |
medium | 5.1 | 0.0009 | 2026-10-29 | Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 | |
CVE-2026-21019 |
high | 8.6 | 0.0016 | 2026-10-29 | Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 | |
CVE-2026-21018 |
medium | 6.8 | 0.0015 | 2026-10-29 | Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged | |
CVE-2026-21016 |
medium | 5.1 | 0.0009 | 2026-10-29 | Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows l | |
CVE-2026-21015 |
medium | 6.8 | 0.0009 | 2026-10-29 | Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows loca | |
CVE-2026-8336 |
high | 7.7 | 0.0026 | 2026-10-29 | After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapre | |
CVE-2026-8202 |
medium | 5.3 | 0.0026 | 2026-10-29 | Using a densely populated chars mask and a large input string in the MongoDB aggregation o | |
CVE-2026-8201 |
medium | 6.1 | 0.0013 | 2026-10-29 | A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query anal | |
CVE-2026-8200 |
medium | 4.8 | 0.0020 | 2026-10-29 | When schema validation is enabled on a collection and an update or insert would violate th | |
CVE-2026-8199 |
high | 7.1 | 0.0026 | 2026-10-29 | An authenticated user can cause excess memory usage via bitwise match expression AST proce | |
CVE-2026-8053 |
high | 8.7 | 0.0066 | 2026-10-29 | An issue in MongoDB Server's time-series collection implementation allows an authenticated | |
CVE-2026-6888 |
high | 7.2 | 0.0037 | 2026-10-29 | Successful exploitation of the SQL injection vulnerability could allow a remote authentica | |
CVE-2024-36315 |
medium | 5.7 | 0.0014 | 2026-10-29 | Improper enforcement of the LFENCE serialization property may allow an attacker to bypass | |
CVE-2026-8108 |
high | 7.8 | 0.0015 | 2026-10-29 | The installation of Fuji Tellus adds a driver to the kernel which grants all users read an | |
CVE-2026-44548 |
high | 8.1 | 0.0014 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level cross-site | |
CVE-2026-44547 |
critical | 9.6 | 0.0026 | 2026-10-29 | ChurchCRM is an open-source church management system. From 7.2.0 to 7.2.2, The fix for CVE | |
CVE-2026-44352 |
medium | 5.3 | 0.0026 | 2026-10-29 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investi | |
CVE-2026-44347 |
medium | 6.5 | 0.0013 | 2026-10-29 | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.23.3, t | |
CVE-2026-44341 |
medium | 5.3 | 0.0029 | 2026-10-29 | GoJobs is a REST API for a Job Board platform. The application exposes a job retrieval end | |
CVE-2026-43685 |
high | 7.2 | 0.0046 | 2026-10-29 | A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin | |
CVE-2026-43680 |
high | 7.2 | 0.0046 | 2026-10-29 | A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin | |
CVE-2026-42289 |
high | 8.8 | 0.0015 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.3.2, UserEditor.php proce | |
CVE-2026-42288 |
critical | 10.0 | 0.0072 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.3.2, The fix for CVE-2026 | |
CVE-2026-42158 |
low | 2.3 | 0.0021 | 2026-10-29 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investi | |
CVE-2026-42157 |
medium | 5.1 | 0.0034 | 2026-10-29 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investi | |
CVE-2026-42156 |
high | 7.1 | 0.0035 | 2026-10-29 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investi | |
CVE-2026-45227 |
high | 8.7 | 0.0029 | 2026-10-29 | Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool execu | |
CVE-2026-45226 |
high | 7.6 | 0.0029 | 2026-10-29 | Heym before 0.0.21 contains an authorization bypass vulnerability in workflow execution th | |
CVE-2026-45225 |
high | 7.2 | 0.0036 | 2026-10-29 | Heym before 0.0.21 contains a path traversal vulnerability in the file upload endpoint tha | |
CVE-2026-44871 |
high | 8.8 | 0.0123 | 2026-10-29 | Command injection vulnerabilities exist in the command line interface (CLI) service access | |
CVE-2026-44307 |
high | 8.7 | 0.0074 | 2026-10-29 | Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using bac | |
CVE-2026-44306 |
medium | 5.3 | 0.0021 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.21 an | |
CVE-2026-44305 |
medium | 6.8 | 0.0014 | 2026-10-29 | Lemur manages TLS certificate creation. Prior to 1.9.0, when LDAP TLS is enabled (LDAP_USE | |
CVE-2026-44304 |
high | 8.1 | 0.0022 | 2026-10-29 | Lemur manages TLS certificate creation. Prior to 1.9.0, Lemur's LDAP authentication module | |
CVE-2026-44302 |
high | 7.5 | 0.0032 | 2026-10-29 | Snappier is a high performance C# implementation of the Snappy compression algorithm. Prio | |
CVE-2026-44301 |
medium | 6.2 | 0.0027 | 2026-10-29 | Hugo is a static site generator. From 0.43 to before 0.161.0, when building a Hugo site th | |
CVE-2026-44262 |
critical | 9.4 | 0.0586 | 2026-10-29 | Scramble generates API documentation for Laravel project. From 0.13.2 to before 0.13.22, w | |
CVE-2026-44260 |
high | 8.1 | 0.0035 | 2026-10-29 | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the readonly flag set on the | |
CVE-2026-44259 |
medium | 4.6 | 0.0017 | 2026-10-29 | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the previewServlet serves fi | |
CVE-2026-44258 |
critical | 9.3 | 0.0036 | 2026-10-29 | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the elfinder_checkRisk funct | |
CVE-2026-44257 |
critical | 9.3 | 0.0039 | 2026-10-29 | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, efw.file.FileManager.unZip w | |
CVE-2026-44242 |
low | 3.7 | 0.0026 | 2026-10-29 | Micronaut Framework is a JVM-based full stack Java framework designed for building modular | |
CVE-2026-44241 |
high | 7.5 | 0.0064 | 2026-10-29 | Micronaut Framework is a JVM-based full stack Java framework designed for building modular | |
CVE-2026-44015 |
critical | 9.9 | 0.0032 | 2026-10-29 | Nginx UI is a web user interface for the Nginx web server. In 2.3.4 and earlier, an authen | |
CVE-2026-42855 |
high | 7.5 | 0.0035 | 2026-10-29 | arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and |