Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-33516 |
high | 7.7 | 0.0043 | 2026-10-29 | xrdp is an open source RDP server. Versions through 0.10.5 contain an out-of-bounds read v | |
CVE-2026-33093 |
medium | 5.3 | 0.0025 | 2026-10-29 | Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a | |
CVE-2026-32650 |
high | 7.5 | 0.0021 | 2026-10-29 | Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to d | |
CVE-2026-32648 |
medium | 5.3 | 0.0025 | 2026-10-29 | Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug conf | |
CVE-2026-32624 |
medium | 6.3 | 0.0041 | 2026-10-29 | xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer ove | |
CVE-2026-32623 |
high | 7.7 | 0.0054 | 2026-10-29 | xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer ove | |
CVE-2026-32324 |
high | 7.7 | 0.0009 | 2026-10-29 | Anviz CX7 Firmware is vulnerable because the application embeds reusable certificate/key | |
CVE-2026-32107 |
high | 8.8 | 0.0016 | 2026-10-29 | xrdp is an open source RDP server. In versions through 0.10.5, the session execution compo | |
CVE-2026-32105 |
critical | 9.3 | 0.0017 | 2026-10-29 | xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement ver | |
CVE-2026-31927 |
medium | 4.9 | 0.0035 | 2026-10-29 | Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversa | |
CVE-2026-6437 |
medium | 6.9 | 0.0056 | 2026-10-29 | Improper neutralization of argument delimiters in the volume handling component in AWS EFS | |
CVE-2026-40525 |
critical | 9.1 | 0.0057 | 2026-10-29 | OpenViking prior to version 0.3.9 contains an authentication bypass vulnerability in the V | |
CVE-2026-33337 |
high | 7.5 | 0.0054 | 2026-10-29 | Firebird is an open-source relational database management system. In versions prior to 5.0 | |
CVE-2026-28224 |
high | 8.2 | 0.0046 | 2026-10-29 | Firebird is an open-source relational database management system. In versions prior to 5.0 | |
CVE-2026-28214 |
medium | 6.0 | 0.0113 | 2026-10-29 | Firebird is an open-source relational database management system. In versions prior to 5.0 | |
CVE-2026-28212 |
high | 7.5 | 0.0050 | 2026-10-29 | Firebird is an open-source relational database management system. In versions prior to 6.0 | |
CVE-2026-27890 |
high | 8.2 | 0.0046 | 2026-10-29 | Firebird is an open-source relational database management system. In versions prior to 5.0 | |
CVE-2026-40320 |
medium | 5.4 | 0.0014 | 2026-10-29 | Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, t | |
CVE-2026-40319 |
low | 1.0 | 0.0015 | 2026-10-29 | Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, t | |
CVE-2026-40518 |
high | 7.1 | 0.0036 | 2026-10-29 | ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file writ | |
CVE-2026-40516 |
high | 7.8 | 0.0018 | 2026-10-29 | OpenHarness before commit bd4df81 contains a server-side request forgery vulnerability in | |
CVE-2026-40515 |
high | 8.7 | 0.0023 | 2026-10-29 | OpenHarness before commit bd4df81 contains a permission bypass vulnerability that allows a | |
CVE-2026-21733 |
high | 7.3 | 0.0010 | 2026-10-29 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-6497 |
low | 2.1 | 0.0027 | 2026-10-29 | A vulnerability was determined in prasathmani TinyFileManager up to 2.6. Affected by this | |
CVE-2026-6284 |
critical | 9.3 | 0.0045 | 2026-10-29 | An attacker with network access to the PLC is able to brute force discover passwords to ga | |
CVE-2026-21709 |
medium | 6.7 | 0.0017 | 2026-10-29 | A vulnerability allowing a local attacker with administrator privileges to bypass Windows | |
CVE-2026-6496 |
low | 2.1 | 0.0046 | 2026-10-29 | A vulnerability was found in prasathmani TinyFileManager up to 2.6. Affected is an unknown | |
CVE-2026-6493 |
low | 2.0 | 0.0026 | 2026-10-29 | A flaw has been found in lukevella rallly up to 4.7.4. This affects an unknown function of | |
CVE-2026-41153 |
critical | 9.8 | 0.0026 | 2026-10-29 | In JetBrains Junie before 252.549.29 command execution was possible via malicious project | |
CVE-2026-6492 |
medium | 5.5 | 0.0042 | 2026-10-29 | A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6 | |
CVE-2026-6490 |
medium | 5.5 | 0.0032 | 2026-10-29 | A weakness has been identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d | |
CVE-2026-6507 |
high | 7.5 | 0.0048 | 2026-10-29 | A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulner | |
CVE-2026-6489 |
low | 2.1 | 0.0026 | 2026-10-29 | A security flaw has been discovered in QueryMine sms up to 7ab5a9ea196209611134525ffc18de2 | |
CVE-2026-6488 |
low | 2.1 | 0.0020 | 2026-10-29 | A vulnerability was identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d | |
CVE-2026-6487 |
low | 2.1 | 0.0037 | 2026-10-29 | A flaw has been found in Qihui jtbc5 CMS 5.0.3.6. Affected is an unknown function of the f | |
CVE-2026-28263 |
medium | 4.8 | 0.0020 | 2026-10-29 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release | |
CVE-2026-23777 |
medium | 6.5 | 0.0030 | 2026-10-29 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release | |
CVE-2026-6483 |
high | 7.3 | 0.1337 | 2026-10-29 | A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the f | |
CVE-2026-5131 |
medium | 6.9 | 0.0043 | 2026-10-29 | GREENmod uses named pipes for communication between plugins, the web portal, and the syste | |
CVE-2026-35153 |
medium | 6.7 | 0.0022 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS20 | |
CVE-2026-35074 |
medium | 6.7 | 0.0057 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS20 | |
CVE-2026-35073 |
medium | 6.7 | 0.0057 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS20 | |
CVE-2026-35072 |
medium | 6.7 | 0.0057 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS20 | |
CVE-2026-23779 |
medium | 6.7 | 0.0052 | 2026-10-29 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release | |
CVE-2026-23776 |
high | 8.8 | 0.0022 | 2026-10-29 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release | |
CVE-2026-6494 |
medium | 5.3 | 0.0031 | 2026-10-29 | A flaw was found in the AAP MCP server. An unauthenticated remote attacker can exploit a l | |
CVE-2026-23778 |
high | 7.2 | 0.0114 | 2026-10-29 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release | |
CVE-2026-23775 |
medium | 5.7 | 0.0033 | 2026-10-29 | Dell PowerProtect Data Domain appliances with Data Domain Operating System (DD OS) of Feat | |
CVE-2026-40002 |
high | 8.8 | 0.0012 | 2026-10-29 | Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications | |
CVE-2026-33392 |
high | 7.2 | 0.0043 | 2026-10-29 | In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbo |