Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-7461 |
high | 7.5 | 0.0055 | 2026-10-29 | Improper neutralization of inputs used in an OS command in the FSx Windows File Server vol | |
CVE-2026-32148 |
high | 8.9 | 0.0019 | 2026-10-29 | Insufficient Verification of Data Authenticity vulnerability in hexpm hex (Hex.RemoteConve | |
CVE-2026-3833 |
high | 7.4 | 0.0056 | 2026-10-29 | A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensiti | |
CVE-2026-3832 |
low | 3.7 | 0.0080 | 2026-10-29 | A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenti | |
CVE-2026-33845 |
critical | 9.1 | 0.0207 | 2026-10-29 | A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and no | |
CVE-2026-5174 |
high | 8.8 | 0.0332 | 2026-10-29 | Improper input validation vulnerability in Progress Software MOVEit Automation allows Priv | |
CVE-2026-4670 |
critical | 9.8 | 0.0504 | 2026-10-29 | Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automa | |
CVE-2026-7500 |
medium | 5.4 | 0.0023 | 2026-10-29 | When Keycloak is started with `--features-disabled=account,account-api`, the Account REST | |
CVE-2026-7246 |
— | — | 0.0090 | 2026-10-29 | This CVE record was assigned not following CNA/CVE rules and is not considered a valid vul | |
CVE-2026-7163 |
medium | 5.5 | 0.0019 | 2026-10-29 | A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted | |
CVE-2026-7402 |
high | 8.1 | 0.0038 | 2026-10-29 | Improper Control of Interaction Frequency vulnerability in MeWare Software Development Inc | |
CVE-2026-7399 |
high | 8.1 | 0.0033 | 2026-10-29 | Authorization bypass through User-Controlled key vulnerability in MeWare Software Developm | |
CVE-2026-7382 |
medium | 6.5 | 0.0034 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal i | |
CVE-2026-5080 |
medium | 5.9 | 0.0036 | 2026-10-29 | Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurel | |
CVE-2026-41882 |
high | 7.5 | 0.0040 | 2026-10-29 | In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026 | |
CVE-2026-1493 |
medium | 4.6 | 0.0018 | 2026-10-29 | LEX Baza Dokumentów is vulnerable to DOM-based XSS in "em" cookie parameter. The applicati | |
CVE-2026-42800 |
medium | 5.3 | 0.0024 | 2026-10-29 | NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_clien | |
CVE-2026-41016 |
medium | 5.9 | 0.0027 | 2026-10-29 | Apache Airflow's SMTP provider `SmtpHook` called Python's `smtplib.SMTP.starttls()` withou | |
CVE-2026-42799 |
critical | 9.8 | 0.0028 | 2026-10-29 | Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. | |
CVE-2026-22070 |
critical | 9.8 | 0.0021 | 2026-10-29 | ColorOS Assistant has an unauthenticated start-download channel, leading to file path trav | |
CVE-2026-6870 |
medium | 5.5 | 0.0016 | 2026-10-29 | GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows den | |
CVE-2026-6538 |
medium | 5.5 | 0.0018 | 2026-10-29 | BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denia | |
CVE-2026-6533 |
medium | 5.5 | 0.0015 | 2026-10-29 | Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 | |
CVE-2026-6530 |
medium | 5.5 | 0.0016 | 2026-10-29 | DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows d | |
CVE-2026-6528 |
medium | 5.5 | 0.0014 | 2026-10-29 | TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service | |
CVE-2026-6526 |
medium | 5.5 | 0.0012 | 2026-10-29 | RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 | |
CVE-2026-6524 |
medium | 5.5 | 0.0012 | 2026-10-29 | MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows deni | |
CVE-2026-6522 |
medium | 5.5 | 0.0012 | 2026-10-29 | RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4. | |
CVE-2026-6520 |
high | 7.5 | 0.0017 | 2026-10-29 | OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4. | |
CVE-2026-6519 |
high | 7.5 | 0.0017 | 2026-10-29 | MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allo | |
CVE-2026-5654 |
high | 7.5 | 0.0021 | 2026-10-29 | AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of servic | |
CVE-2026-5402 |
— | — | 0.0039 | 2026-10-29 | TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service | |
CVE-2026-5299 |
medium | 5.5 | 0.0012 | 2026-10-29 | ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows | |
CVE-2026-42798 |
medium | 4.0 | 0.0013 | 2026-10-29 | Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in c | |
CVE-2026-41226 |
medium | 5.1 | 0.0030 | 2026-10-29 | Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ric | |
CVE-2026-7375 |
high | 7.5 | 0.0019 | 2026-10-29 | UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allow | |
CVE-2026-7470 |
high | 7.4 | 0.0052 | 2026-10-29 | A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the fun | |
CVE-2026-7469 |
low | 2.1 | 0.0142 | 2026-10-29 | A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts | |
CVE-2026-7468 |
medium | 5.5 | 0.0036 | 2026-10-29 | A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affe | |
CVE-2026-7447 |
low | 2.1 | 0.0025 | 2026-10-29 | A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnera | |
CVE-2026-7446 |
medium | 5.5 | 0.0154 | 2026-10-29 | A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the funct | |
CVE-2026-7445 |
low | 2.1 | 0.0029 | 2026-10-29 | A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected | |
CVE-2026-7443 |
medium | 5.5 | 0.0152 | 2026-10-29 | A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this | |
CVE-2026-7420 |
high | 7.4 | 0.0046 | 2026-10-29 | A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacte | |
CVE-2026-7419 |
high | 7.4 | 0.0054 | 2026-10-29 | A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue a | |
CVE-2026-7381 |
critical | 9.1 | 0.0044 | 2026-10-29 | Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled | |
CVE-2026-7418 |
high | 7.4 | 0.0056 | 2026-10-29 | A vulnerability was determined in UTT HiPER 1250GW up to 3.2.7-210907-180535. This vulnera | |
CVE-2026-7417 |
medium | 5.5 | 0.0036 | 2026-10-29 | A vulnerability was found in Algovate xhs-mcp 0.8.11. This affects the function xhs_publis | |
CVE-2026-7416 |
medium | 5.5 | 0.0179 | 2026-10-29 | A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the fun | |
CVE-2026-7410 |
low | 2.1 | 0.0019 | 2026-10-29 | A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This vulner |