Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-28929 |
high | 7.5 | 0.0041 | 2026-10-29 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iP | |
CVE-2026-28925 |
high | 7.5 | 0.0044 | 2026-10-29 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macO | |
CVE-2026-28924 |
high | 7.5 | 0.0031 | 2026-10-29 | A race condition was addressed with improved handling of symbolic links. This issue is fix | |
CVE-2026-28923 |
high | 8.8 | 0.0015 | 2026-10-29 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS S | |
CVE-2026-28922 |
medium | 6.5 | 0.0032 | 2026-10-29 | This issue was addressed through improved state management. This issue is fixed in macOS S | |
CVE-2026-28920 |
medium | 6.5 | 0.0032 | 2026-10-29 | An information leakage was addressed with additional validation. This issue is fixed in iO | |
CVE-2026-28919 |
high | 7.8 | 0.0015 | 2026-10-29 | A consistency issue was addressed with improved state handling. This issue is fixed in mac | |
CVE-2026-28918 |
medium | 6.5 | 0.0049 | 2026-10-29 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is f | |
CVE-2026-28917 |
medium | 4.3 | 0.0030 | 2026-10-29 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.5 | |
CVE-2026-28915 |
high | 7.8 | 0.0018 | 2026-10-29 | A parsing issue in the handling of directory paths was addressed with improved path valida | |
CVE-2026-28914 |
medium | 5.5 | 0.0020 | 2026-10-29 | A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequ | |
CVE-2026-28913 |
high | 7.5 | 0.0033 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, | |
CVE-2026-28910 |
low | 3.3 | 0.0012 | 2026-10-29 | This issue was addressed with improved permissions checking. This issue is fixed in macOS | |
CVE-2026-28908 |
high | 7.5 | 0.0048 | 2026-10-29 | A denial of service issue was addressed by removing the vulnerable code. This issue is fix | |
CVE-2026-28907 |
high | 8.1 | 0.0030 | 2026-10-29 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.5 | |
CVE-2026-28906 |
high | 7.5 | 0.0043 | 2026-10-29 | This issue was addressed through improved state management. This issue is fixed in iOS 18. | |
CVE-2026-28905 |
— | — | 0.0041 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, | |
CVE-2026-28904 |
— | — | 0.0041 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, | |
CVE-2026-28903 |
— | — | 0.0039 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, | |
CVE-2026-28902 |
— | — | 0.0039 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, | |
CVE-2026-28901 |
— | — | 0.0039 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, | |
CVE-2026-28897 |
medium | 6.2 | 0.0017 | 2026-10-29 | A buffer overflow was addressed with improved input validation. This issue is fixed in iOS | |
CVE-2026-28883 |
— | — | 0.0040 | 2026-10-29 | A use-after-free issue was addressed with improved memory management. This issue is fixed | |
CVE-2026-28873 |
high | 7.5 | 0.0031 | 2026-10-29 | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18 | |
CVE-2026-28872 |
high | 7.5 | 0.0046 | 2026-10-29 | A resource exhaustion issue was addressed with improved input validation. This issue is fi | |
CVE-2026-28860 |
high | 7.5 | 0.0038 | 2026-10-29 | The issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 | |
CVE-2026-28848 |
high | 7.5 | 0.0054 | 2026-10-29 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macO | |
CVE-2026-28847 |
— | — | 0.0060 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, | |
CVE-2026-28846 |
high | 7.5 | 0.0073 | 2026-10-29 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS | |
CVE-2026-28840 |
high | 7.8 | 0.0014 | 2026-10-29 | A permissions issue was addressed with additional restrictions. This issue is fixed in mac | |
CVE-2026-28830 |
medium | 4.7 | 0.0008 | 2026-10-29 | A race condition was addressed with additional validation. This issue is fixed in macOS Ta | |
CVE-2026-28819 |
medium | 5.4 | 0.0650 | 2026-10-29 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi | |
CVE-2026-20696 |
medium | 5.5 | 0.0012 | 2026-10-29 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-8321 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the func | |
CVE-2026-8320 |
low | 2.0 | 0.0022 | 2026-10-29 | A security vulnerability has been detected in jishenghua jshERP up to 3.6. This affects th | |
CVE-2026-8319 |
medium | 5.5 | 0.0038 | 2026-10-29 | A weakness has been identified in aiwaves-cn agents up to e8c4e3c2d19739d3dff59e577d1c9709 | |
CVE-2026-6146 |
medium | 5.3 | 0.0017 | 2026-10-29 | Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys. | |
CVE-2026-45026 |
medium | 6.8 | 0.0029 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, a Stored C | |
CVE-2026-45025 |
medium | 6.8 | 0.0029 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, a Stored C | |
CVE-2026-42887 |
medium | 4.5 | 0.0026 | 2026-10-29 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.33.0, a stored cr | |
CVE-2026-42886 |
medium | 4.9 | 0.0031 | 2026-10-29 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /a | |
CVE-2026-42885 |
medium | 4.3 | 0.0028 | 2026-10-29 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /a | |
CVE-2026-42884 |
medium | 4.3 | 0.0020 | 2026-10-29 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the GET /ap | |
CVE-2026-42883 |
medium | 6.5 | 0.0026 | 2026-10-29 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the GET /ap | |
CVE-2026-42882 |
critical | 9.4 | 0.0055 | 2026-10-29 | oxyno-zeta/s3-proxy is an aws s3 proxy written in go. Prior to 5.0.0, s3-proxy contains an | |
CVE-2026-42874 |
low | 3.7 | 0.0022 | 2026-10-29 | Microdot is a minimalistic Python web framework. Prior to 2.6.1, the Response.set_cookie() | |
CVE-2026-42873 |
none | — | 0.0023 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, when atte | |
CVE-2026-42872 |
medium | 6.1 | 0.0021 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, a reflecte | |
CVE-2026-42870 |
medium | 6.4 | 0.0035 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, a Stored C | |
CVE-2026-42869 |
critical | 10.0 | 0.0056 | 2026-10-29 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper |