Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-8093 |
— | — | 0.0032 | 2026-10-29 | Memory safety bugs present in Thunderbird 150.0.1. Some of these bugs showed evidence of m | |
CVE-2026-8092 |
— | — | 0.0041 | 2026-10-29 | Memory safety bugs present in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. Some of th | |
CVE-2026-8091 |
— | — | 0.0047 | 2026-10-29 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability w | |
CVE-2026-8090 |
— | — | 0.0032 | 2026-10-29 | Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 1 | |
CVE-2026-6508 |
critical | 9.8 | 0.0022 | 2026-10-29 | Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Ins | |
CVE-2026-42285 |
high | 7.5 | 0.0042 | 2026-10-29 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming | |
CVE-2026-42010 |
critical | 9.8 | 0.0105 | 2026-10-29 | A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-S | |
CVE-2026-41643 |
high | 7.5 | 0.0054 | 2026-10-29 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming | |
CVE-2026-41642 |
high | 7.5 | 0.0050 | 2026-10-29 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming | |
CVE-2026-3953 |
high | 8.8 | 0.0034 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-27415 |
medium | 4.3 | 0.0009 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Req | |
CVE-2026-6805 |
medium | 6.9 | 0.0023 | 2026-10-29 | Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sh | |
CVE-2026-44407 |
high | 7.5 | 0.0027 | 2026-10-29 | A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, whi | |
CVE-2026-27416 |
medium | 5.3 | 0.0018 | 2026-10-29 | Missing Authorization vulnerability in bPlugins PDF Poster allows Exploiting Incorrectly C | |
CVE-2026-27329 |
medium | 5.3 | 0.0032 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wi | |
CVE-2024-43384 |
high | 8.0 | 0.0034 | 2026-10-29 | A low privileged remote attacker can gain the root password due to improper removal of sen | |
CVE-2026-44406 |
high | 7.8 | 0.0016 | 2026-10-29 | ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewSer | |
CVE-2026-8063 |
high | 7.1 | 0.0023 | 2026-10-29 | An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an em | |
CVE-2026-41586 |
critical | 9.3 | 0.0053 | 2026-10-29 | Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for de | |
CVE-2026-41139 |
high | 8.8 | 0.0058 | 2026-10-29 | Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to be | |
CVE-2026-44603 |
critical | 9.1 | 0.0034 | 2026-10-29 | Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka T | |
CVE-2026-44602 |
high | 7.5 | 0.0033 | 2026-10-29 | Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of orde | |
CVE-2026-44601 |
high | 7.5 | 0.0034 | 2026-10-29 | Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client cra | |
CVE-2026-42217 |
medium | 6.3 | 0.0039 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-42216 |
high | 8.8 | 0.0046 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-41891 |
medium | 5.3 | 0.0027 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-41890 |
medium | 6.9 | 0.0041 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-41587 |
high | 8.6 | 0.0062 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-41203 |
critical | 9.4 | 0.0062 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-41202 |
critical | 9.4 | 0.0068 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-41201 |
critical | 9.1 | 0.0033 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-41142 |
— | — | 0.0044 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-41004 |
medium | 4.4 | 0.0017 | 2026-10-29 | When enabling trace logging in Spring Cloud Config Server sensitive information was placed | |
CVE-2026-41002 |
high | 8.1 | 0.0022 | 2026-10-29 | The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Con | |
CVE-2026-40982 |
— | — | 0.0073 | 2026-10-29 | Spring Cloud Config allows applications to serve arbitrary text and binary files through t | |
CVE-2026-40981 |
— | — | 0.0043 | 2026-10-29 | When using Google Secrets Manager as a backend for the Spring Cloud Config server a client | |
CVE-2026-40004 |
high | 7.8 | 0.0014 | 2026-10-29 | There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSma | |
CVE-2026-44600 |
medium | 5.3 | 0.0038 | 2026-10-29 | Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clea | |
CVE-2026-44599 |
medium | 5.3 | 0.0029 | 2026-10-29 | Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008. | |
CVE-2026-40003 |
medium | 6.8 | 0.0030 | 2026-10-29 | ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via US | |
CVE-2026-44597 |
critical | 9.1 | 0.0045 | 2026-10-29 | Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell | |
CVE-2026-41484 |
medium | 5.9 | 0.0034 | 2026-10-29 | OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollec | |
CVE-2026-41483 |
medium | 5.9 | 0.0032 | 2026-10-29 | OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments. In ver | |
CVE-2026-41310 |
medium | 5.3 | 0.0031 | 2026-10-29 | OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1 | |
CVE-2026-40296 |
medium | 5.4 | 0.0022 | 2026-10-29 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The HTML w | |
CVE-2026-3291 |
medium | 6.9 | 0.0010 | 2026-10-29 | Samsung Print Service Plugin for Android is potentially vulnerable to information disclosu | |
CVE-2026-40251 |
high | 7.1 | 0.0041 | 2026-10-29 | Incus is a system container and virtual machine manager. In versions before 7.0.0, missing | |
CVE-2026-40243 |
low | 2.3 | 0.0017 | 2026-10-29 | Incus is a system container and virtual machine manager. In versions before 7.0.0, broken | |
CVE-2026-40197 |
high | 7.1 | 0.0039 | 2026-10-29 | Incus is a system container and virtual machine manager. In versions before 7.0.0, missing | |
CVE-2026-40195 |
high | 7.1 | 0.0040 | 2026-10-29 | Incus is a system container and virtual machine manager. In versions before 7.0.0, missing |