Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-22744 |
high | 7.5 | 0.0026 | 2026-10-29 | In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string | |
CVE-2026-22743 |
high | 7.5 | 0.0026 | 2026-10-29 | Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVector | |
CVE-2026-22742 |
high | 8.6 | 0.0037 | 2026-10-29 | Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulne | |
CVE-2026-22738 |
critical | 9.8 | 0.0113 | 2026-10-29 | In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-suppl | |
CVE-2026-23353 |
medium | 5.5 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ice: fix crash in eth | |
CVE-2026-28864 |
low | 3.3 | 0.0019 | 2026-10-29 | This issue was addressed with improved permissions checking. This issue is fixed in iOS 18 | |
CVE-2026-4775 |
high | 7.8 | 0.0058 | 2026-10-29 | A flaw was found in the libtiff library. A remote attacker could exploit a signed integer | |
CVE-2026-4633 |
low | 3.7 | 0.0043 | 2026-10-29 | A flaw was found in Keycloak. A remote attacker can exploit differential error messages du | |
CVE-2026-4628 |
medium | 4.3 | 0.0027 | 2026-10-29 | A flaw was found in Keycloak. An improper Access Control vulnerability in Keycloak’s User- | |
CVE-2026-28039 |
high | 7.5 | 0.0042 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-20649 |
high | 7.5 | 0.0045 | 2026-10-29 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26. | |
CVE-2026-20648 |
medium | 5.5 | 0.0024 | 2026-10-29 | A privacy issue was addressed by moving sensitive data to a protected location. This issue | |
CVE-2026-0631 |
high | 8.5 | 0.0162 | 2026-10-29 | An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in T | |
CVE-2026-24401 |
medium | 6.5 | 0.0037 | 2026-10-29 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS- | |
CVE-2025-69035 |
high | 8.8 | 0.0042 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in Strongholdthemes Dental Care CPT dental | |
CVE-2026-0976 |
low | 3.7 | 0.0049 | 2026-10-29 | A flaw was found in Keycloak. This improper input validation vulnerability occurs because | |
CVE-2026-0747 |
low | 3.3 | 0.0020 | 2026-10-29 | Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutio | |
CVE-2026-0671 |
medium | 6.1 | 0.0024 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-0719 |
high | 8.6 | 0.0061 | 2026-10-29 | A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, use | |
CVE-2026-0676 |
medium | 5.3 | 0.0025 | 2026-10-29 | Missing Authorization vulnerability in G5Theme Zorka zorka allows Exploiting Incorrectly C | |
CVE-2026-0674 |
medium | 4.3 | 0.0022 | 2026-10-29 | Missing Authorization vulnerability in Campaign Monitor Campaign Monitor for WordPress all | |
CVE-2026-0701 |
low | 2.0 | 0.0037 | 2026-10-29 | A vulnerability was identified in code-projects Intern Membership Management System 1.0. A | |
CVE-2026-0700 |
medium | 5.5 | 0.0044 | 2026-10-29 | A vulnerability was determined in code-projects Intern Membership Management System 1.0. A | |
CVE-2026-0699 |
low | 2.0 | 0.0036 | 2026-10-29 | A vulnerability was found in code-projects Intern Membership Management System 1.0. This i | |
CVE-2026-0698 |
low | 2.0 | 0.0040 | 2026-10-29 | A vulnerability has been found in code-projects Intern Membership Management System 1.0. T | |
CVE-2026-0697 |
low | 2.0 | 0.0036 | 2026-10-29 | A flaw has been found in code-projects Intern Membership Management System 1.0. The impact | |
CVE-2026-0707 |
medium | 5.3 | 0.0040 | 2026-10-29 | A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissiv | |
CVE-2026-0670 |
medium | 6.1 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-0669 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-0668 |
medium | 5.3 | 0.0048 | 2026-10-29 | Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki | |
CVE-2026-20029 |
medium | 4.9 | 0.0608 | 2026-10-29 | A vulnerability in the licensing features of Cisco Identity Services Engine (ISE) and | |
CVE-2026-20027 |
medium | 5.3 | 0.0060 | 2026-10-29 | Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC reque | |
CVE-2026-20026 |
medium | 5.8 | 0.0067 | 2026-10-29 | Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC | |
CVE-2026-0618 |
medium | 6.1 | 0.0018 | 2026-10-29 | Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects | |
CVE-2025-65805 |
high | 7.5 | 0.0038 | 2026-10-29 | OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS me | |
CVE-2026-0650 |
critical | 9.3 | 0.0152 | 2026-10-29 | OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerab | |
CVE-2026-0643 |
medium | 5.5 | 0.0042 | 2026-10-29 | A flaw has been found in projectworlds House Rental and Property Listing 1.0. Impacted is | |
CVE-2026-0642 |
low | 1.9 | 0.0025 | 2026-10-29 | A vulnerability was detected in projectworlds House Rental and Property Listing 1.0. This | |
CVE-2026-0628 |
high | 8.8 | 0.2095 | 2026-10-29 | Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 al | |
CVE-2026-0641 |
low | 2.1 | 0.0265 | 2026-10-29 | A security vulnerability has been detected in TOTOLINK WA300 5.2cu.7112_B20190227. This vu | |
CVE-2026-0640 |
high | 7.4 | 0.0348 | 2026-10-29 | A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf | |
CVE-2026-0607 |
medium | 5.5 | 0.0044 | 2026-10-29 | A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part | |
CVE-2026-0606 |
medium | 5.5 | 0.0046 | 2026-10-29 | A vulnerability was detected in code-projects Online Music Site 1.0. Affected by this issu | |
CVE-2026-0625 |
critical | 9.3 | 0.0097 | 2026-10-29 | Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access c | |
CVE-2026-0621 |
high | 8.7 | 0.0044 | 2026-10-29 | Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expre | |
CVE-2026-0605 |
medium | 5.5 | 0.0044 | 2026-10-29 | A security vulnerability has been detected in code-projects Online Music Site 1.0. Affecte | |
CVE-2025-53966 |
high | 8.4 | 0.0016 | 2026-10-29 | An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Inc | |
CVE-2026-0597 |
low | 2.1 | 0.0032 | 2026-10-29 | A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue | |
CVE-2026-0592 |
medium | 5.5 | 0.0044 | 2026-10-29 | A security flaw has been discovered in code-projects Online Product Reservation System 1.0 | |
CVE-2026-0591 |
low | 2.1 | 0.0037 | 2026-10-29 | A vulnerability was identified in code-projects Online Product Reservation System 1.0. The |