Browse All CVEs
10,814 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-15534 |
medium | 5.7 | 0.0016 | 2026-10-29 | Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expre | |
CVE-2026-19362 |
medium | 5.5 | 0.0064 | 2026-10-29 | A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This issue affects the f | |
CVE-2026-19363 |
medium | 5.5 | 0.0067 | 2026-10-29 | A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown | |
CVE-2026-69659 |
medium | 5.9 | 0.0036 | 2026-10-29 | Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to e | |
CVE-2026-19368 |
medium | 4.8 | 0.0017 | 2026-10-29 | A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Affected by this issue is some un | |
CVE-2026-19374 |
medium | 5.5 | 0.0050 | 2026-10-29 | A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef | |
CVE-2026-19376 |
medium | 5.5 | 0.0047 | 2026-10-29 | A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects th | |
CVE-2026-19379 |
medium | 5.5 | 0.0203 | 2026-10-29 | A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function pop | |
CVE-2026-19384 |
medium | 5.5 | 0.0032 | 2026-10-29 | A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. Th | |
CVE-2026-72522 |
medium | 6.2 | 0.0019 | 2026-10-29 | libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low su | |
CVE-2026-12570 |
medium | 5.5 | 0.0019 | 2026-10-29 | A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS | |
CVE-2026-21058 |
medium | 6.9 | 0.0014 | 2026-10-29 | Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local | |
CVE-2026-21059 |
medium | 6.9 | 0.0013 | 2026-10-29 | Improper export of android application components in Samsung Contacts prior to SMR Aug-202 | |
CVE-2026-21060 |
medium | 6.7 | 0.0021 | 2026-10-29 | Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physi | |
CVE-2026-21061 |
medium | 6.0 | 0.0041 | 2026-10-29 | Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote | |
CVE-2026-21062 |
medium | 4.8 | 0.0013 | 2026-10-29 | Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local a | |
CVE-2026-57279 |
medium | 6.0 | 0.0032 | 2026-10-29 | Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is expl | |
CVE-2026-21063 |
medium | 6.8 | 0.0020 | 2026-10-29 | Improper export of android application components in AppLock prior to SMR Aug-2026 Release | |
CVE-2026-21065 |
medium | 4.8 | 0.0015 | 2026-10-29 | Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows loca | |
CVE-2026-21066 |
medium | 5.1 | 0.0015 | 2026-10-29 | Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allo | |
CVE-2026-21067 |
medium | 5.1 | 0.0015 | 2026-10-29 | Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attac | |
CVE-2026-21069 |
medium | 5.1 | 0.0015 | 2026-10-29 | Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2 | |
CVE-2026-21070 |
medium | 5.1 | 0.0021 | 2026-10-29 | Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physic | |
CVE-2026-21071 |
medium | 5.1 | 0.0015 | 2026-10-29 | Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 a | |
CVE-2026-21072 |
medium | 5.1 | 0.0015 | 2026-10-29 | Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 all | |
CVE-2026-21073 |
medium | 5.2 | 0.0021 | 2026-10-29 | Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical | |
CVE-2026-21075 |
medium | 5.3 | 0.0049 | 2026-10-29 | Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 | |
CVE-2026-21076 |
medium | 6.9 | 0.0013 | 2026-10-29 | Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to | |
CVE-2026-21077 |
medium | 6.9 | 0.0013 | 2026-10-29 | Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to | |
CVE-2026-21078 |
medium | 4.7 | 0.0016 | 2026-10-29 | Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior | |
CVE-2026-21080 |
medium | 6.9 | 0.0017 | 2026-10-29 | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allow | |
CVE-2026-21081 |
medium | 5.1 | 0.0013 | 2026-10-29 | Improper export of android application components in SamsungPassAutofill prior to version | |
CVE-2026-21082 |
medium | 6.9 | 0.0017 | 2026-10-29 | Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to | |
CVE-2026-21083 |
medium | 6.8 | 0.0026 | 2026-10-29 | Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attack | |
CVE-2026-21084 |
medium | 6.9 | 0.0013 | 2026-10-29 | Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers t | |
CVE-2026-65945 |
medium | 6.5 | 0.0064 | 2026-10-29 | Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommende | |
CVE-2026-66484 |
medium | 4.6 | 0.0020 | 2026-10-29 | GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionali | |
CVE-2026-66485 |
medium | 4.6 | 0.0019 | 2026-10-29 | GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at s | |
CVE-2026-66486 |
medium | 4.6 | 0.0018 | 2026-10-29 | GNU cpio is vulnerable to improper encoding or escaping of output in its archive member li | |
CVE-2026-71391 |
medium | 5.3 | 0.0054 | 2026-10-29 | GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. | |
CVE-2026-71392 |
medium | 5.3 | 0.0067 | 2026-10-29 | GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12 | |
CVE-2026-71393 |
medium | 5.3 | 0.0067 | 2026-10-29 | GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in sr | |
CVE-2026-71394 |
medium | 5.3 | 0.0044 | 2026-10-29 | GNU Emacs for Android improperly validates the table header input in sfnt_read_table_direc | |
CVE-2026-72570 |
medium | 5.4 | 0.0024 | 2026-10-29 | A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3 | |
CVE-2026-72574 |
medium | 6.1 | 0.0042 | 2026-10-29 | A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthentica | |
CVE-2026-72576 |
medium | 5.4 | 0.0029 | 2026-10-29 | A stored cross-site scripting (XSS) vulnerability in Bludit 4.0.0-beta allows a low-privil | |
CVE-2026-72583 |
medium | 5.4 | 0.0026 | 2026-10-29 | A stored cross-site scripting (XSS) vulnerability in fastschema through v0.15.1 allows a l | |
CVE-2026-72587 |
medium | 6.1 | 0.0032 | 2026-10-29 | A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthentic | |
CVE-2026-72588 |
medium | 5.3 | 0.0042 | 2026-10-29 | A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauth | |
CVE-2026-18370 |
medium | 4.8 | 0.0016 | 2026-10-29 | entr is vulnerable to Heap-based buffer overflow in run_utility() function. The function a |