Browse All CVEs
13,577 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-91661 |
high | 7.7 | 0.0032 | 2026-10-29 | Vulnerability in Oracle Essbase (component: Security). The supported version that is aff | |
CVE-2026-91664 |
high | 7.5 | 0.0029 | 2026-10-29 | Vulnerability in Oracle Essbase (component: Security). The supported version that is aff | |
CVE-2026-91668 |
high | 8.8 | 0.0025 | 2026-10-29 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component | |
CVE-2026-93441 |
high | 8.6 | 0.0033 | 2026-10-29 | IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontro | |
CVE-2026-93888 |
high | 7.8 | 0.0021 | 2026-10-29 | IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 a | |
CVE-2020-37286 |
high | 8.3 | 0.0028 | 2026-10-29 | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an in | |
CVE-2020-37287 |
high | 8.2 | 0.0025 | 2026-10-29 | Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect fu | |
CVE-2021-48018 |
high | 8.3 | 0.0039 | 2026-10-29 | Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks | |
CVE-2021-48020 |
high | 8.3 | 0.0028 | 2026-10-29 | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an in | |
CVE-2025-71437 |
high | 8.7 | 0.0034 | 2026-10-29 | Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sd | |
CVE-2026-105044 |
high | 8.5 | 0.0094 | 2026-10-29 | Improper Neutralization of Special Elements used in an OS Command in Security Toolbox vers | |
CVE-2026-114042 |
high | 7.1 | 0.0035 | 2026-10-29 | FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a | |
CVE-2026-114043 |
high | 7.1 | 0.0040 | 2026-10-29 | FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to | |
CVE-2026-114045 |
high | 8.7 | 0.0058 | 2026-10-29 | FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd chan | |
CVE-2026-114046 |
high | 7.1 | 0.0035 | 2026-10-29 | FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation | |
CVE-2026-114047 |
high | 7.6 | 0.0019 | 2026-10-29 | FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability | |
CVE-2026-114050 |
high | 7.1 | 0.0020 | 2026-10-29 | vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with | |
CVE-2026-114051 |
high | 7.1 | 0.0037 | 2026-10-29 | vLLM before 0.31.0 skips the min_tokens <= max_tokens check for /inference/v1/generate req | |
CVE-2026-114052 |
high | 8.7 | 0.0048 | 2026-10-29 | vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Aud | |
CVE-2026-114054 |
high | 7.1 | 0.0027 | 2026-10-29 | vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attac | |
CVE-2026-114055 |
high | 8.7 | 0.0042 | 2026-10-29 | vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability | |
CVE-2026-114059 |
high | 7.7 | 0.0064 | 2026-10-29 | ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authent | |
CVE-2026-114063 |
high | 8.7 | 0.0040 | 2026-10-29 | SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability | |
CVE-2026-114066 |
high | 7.2 | 0.0027 | 2026-10-29 | Trigger.dev before 4.7.0 contains a missing authorization vulnerability that allows holder | |
CVE-2026-114067 |
high | 7.1 | 0.0031 | 2026-10-29 | Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT | |
CVE-2026-114068 |
high | 7.2 | 0.0037 | 2026-10-29 | Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint t | |
CVE-2026-114069 |
high | 8.6 | 0.0037 | 2026-10-29 | Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the GET /api/ | |
CVE-2026-114078 |
high | 7.2 | 0.0042 | 2026-10-29 | Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in DeleteTaskSched | |
CVE-2026-114081 |
high | 8.3 | 0.0040 | 2026-10-29 | Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compile | |
CVE-2026-114082 |
high | 7.2 | 0.0034 | 2026-10-29 | Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token | |
CVE-2026-114083 |
high | 8.6 | 0.0050 | 2026-10-29 | Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packet | |
CVE-2026-114084 |
high | 8.3 | 0.0040 | 2026-10-29 | Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs | |
CVE-2026-114088 |
high | 8.3 | 0.0040 | 2026-10-29 | Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordin | |
CVE-2026-114089 |
high | 8.7 | 0.0020 | 2026-10-29 | Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI au | |
CVE-2026-114090 |
high | 7.6 | 0.0024 | 2026-10-29 | Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability | |
CVE-2026-114092 |
high | 8.3 | 0.0059 | 2026-10-29 | Trigger.dev before 4.5.0 performs no authentication or organization check in the action ha | |
CVE-2026-114094 |
high | 8.7 | 0.0095 | 2026-10-29 | Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements | |
CVE-2026-114096 |
high | 7.3 | 0.0015 | 2026-10-29 | Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.c | |
CVE-2026-114097 |
high | 7.3 | 0.0019 | 2026-10-29 | Dulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter._ | |
CVE-2026-114098 |
high | 7.3 | 0.0015 | 2026-10-29 | Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() | |
CVE-2026-114102 |
high | 8.7 | 0.0046 | 2026-10-29 | adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticate | |
CVE-2026-114104 |
high | 8.2 | 0.0033 | 2026-10-29 | adm-zip before 0.6.1 contains an inconsistent entry resolution vulnerability that allows a | |
CVE-2026-114106 |
high | 8.7 | 0.0043 | 2026-10-29 | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that al | |
CVE-2026-114107 |
high | 8.7 | 0.0058 | 2026-10-29 | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerabi | |
CVE-2026-114109 |
high | 8.7 | 0.0038 | 2026-10-29 | uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to | |
CVE-2026-114110 |
high | 8.7 | 0.0035 | 2026-10-29 | Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to d | |
CVE-2026-114111 |
high | 8.9 | 0.0013 | 2026-10-29 | sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerabilit | |
CVE-2026-114112 |
high | 8.9 | 0.0024 | 2026-10-29 | Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achie | |
CVE-2026-114113 |
high | 8.4 | 0.0011 | 2026-10-29 | Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE | |
CVE-2026-114117 |
high | 8.2 | 0.0029 | 2026-10-29 | Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) |