Browse All CVEs
13,586 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-82942 |
high | 7.5 | 0.0039 | 2026-10-29 | A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote clien | |
CVE-2026-84747 |
high | 7.5 | 0.0046 | 2026-10-29 | Interpretation conflict in the HTTP protocol implementation in Apache bRPC (version < 1.18 | |
CVE-2026-84748 |
high | 7.5 | 0.0043 | 2026-10-29 | Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote a | |
CVE-2026-86146 |
high | 7.5 | 0.0055 | 2026-10-29 | Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in the bund | |
CVE-2026-86147 |
high | 7.5 | 0.0055 | 2026-10-29 | External control of file name or path and uncontrolled resource consumption in Apache bRPC | |
CVE-2026-94300 |
high | 8.1 | 0.0095 | 2026-10-29 | Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An a | |
CVE-2026-96888 |
high | 7.5 | 0.0046 | 2026-10-29 | A BIND resolver that is configured with both a "redirect" zone and "qname-minimization str | |
CVE-2026-97313 |
high | 7.5 | 0.0045 | 2026-10-29 | A recursive BIND server that receives a query with recursion desired (RD=1) followed by a | |
CVE-2025-0326 |
high | 7.4 | 0.0027 | 2026-10-29 | The system fails to invalidate existing access tokens associated with sub-organization use | |
CVE-2026-104948 |
high | 7.1 | 0.0022 | 2026-10-29 | WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing | |
CVE-2023-7356 |
high | 8.8 | 0.0029 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy | |
CVE-2026-113779 |
high | 8.8 | 0.0041 | 2026-10-29 | The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSens | |
CVE-2026-98869 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zext_dst b | |
CVE-2026-102483 |
high | 7.5 | 0.0043 | 2026-10-29 | Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate th | |
CVE-2026-102486 |
high | 7.5 | 0.0055 | 2026-10-29 | Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allow | |
CVE-2026-114463 |
high | 7.5 | 0.0069 | 2026-10-29 | The webhook platform gateway in Nous Research Hermes Agent versions builds the session cha | |
CVE-2026-114476 |
high | 7.5 | 0.0027 | 2026-10-29 | Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6. | |
CVE-2026-114489 |
high | 8.1 | 0.0027 | 2026-10-29 | Missing authorization in the REST and COM administration APIs of Progressive Robot hMailSe | |
CVE-2026-114490 |
high | 7.8 | 0.0011 | 2026-10-29 | Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3 | |
CVE-2026-114123 |
high | 7.5 | 0.0042 | 2026-10-29 | D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & | |
CVE-2026-20236 |
high | 7.5 | 0.0044 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-20291 |
high | 7.8 | 0.0016 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-20356 |
high | 7.5 | 0.0044 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-76476 |
high | 8.8 | 0.0043 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, engineeri | |
CVE-2026-76477 |
high | 8.8 | 0.0046 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, engineeri | |
CVE-2026-76478 |
high | 8.8 | 0.0015 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, engineeri | |
CVE-2026-76479 |
high | 7.8 | 0.0019 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, engineeri | |
CVE-2026-76490 |
high | 8.6 | 0.0044 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-76491 |
high | 7.5 | 0.0036 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-76492 |
high | 7.5 | 0.0036 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-76493 |
high | 7.5 | 0.0036 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-76494 |
high | 7.8 | 0.0021 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-76495 |
high | 7.8 | 0.0014 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-76496 |
high | 7.0 | 0.0016 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-76505 |
high | 7.5 | 0.0047 | 2026-10-29 | A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that | |
CVE-2026-76524 |
high | 7.8 | 0.0018 | 2026-10-29 | A vulnerability in the control channel socket implementation of Open Source Snort 3 c | |
CVE-2026-110744 |
high | 7.2 | 0.0037 | 2026-10-29 | A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured wi | |
CVE-2026-111184 |
high | 7.8 | 0.0014 | 2026-10-29 | NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerabil | |
CVE-2026-114125 |
high | 8.6 | 0.0039 | 2026-10-29 | Storybook is a frontend workshop for building user interface components and pages in isola | |
CVE-2026-114126 |
high | 8.7 | 0.0053 | 2026-10-29 | Storybook is a frontend workshop for building user interface components and pages in isola | |
CVE-2026-114492 |
high | 7.0 | 0.0051 | 2026-10-29 | gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authentica | |
CVE-2026-92183 |
high | 7.8 | 0.0043 | 2026-10-29 | GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. Th | |
CVE-2026-92202 |
high | 7.8 | 0.0022 | 2026-10-29 | Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vul | |
CVE-2026-92203 |
high | 7.7 | 0.0041 | 2026-10-29 | Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Informat | |
CVE-2026-92204 |
high | 7.7 | 0.0041 | 2026-10-29 | Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Informatio | |
CVE-2026-92208 |
high | 8.8 | 0.0062 | 2026-10-29 | NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulner | |
CVE-2026-92209 |
high | 7.8 | 0.0024 | 2026-10-29 | NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vul | |
CVE-2026-92210 |
high | 7.2 | 0.0033 | 2026-10-29 | NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vul | |
CVE-2025-55702 |
high | 7.0 | 0.0032 | 2026-10-29 | When a client sends a POST with Expect: 100-continue and the origin answers before reading | |
CVE-2026-105934 |
high | 7.2 | 0.0048 | 2026-10-29 | The Apache Pulsar broker admin REST API provides a truncate operation for persistent topic |