Browse All CVEs
1,770 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-85498 |
low | 3.5 | — | 2026-10-29 | A flaw was found in polkit. When processing input that begins with a null byte, an arithme | |
CVE-2026-115303 |
low | 3.7 | — | 2026-10-29 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characte | |
CVE-2024-3586 |
low | 3.5 | — | 2026-10-29 | The LetterPress WordPress plugin before 2.4.0 does not sanitise and escape some of its se | |
CVE-2026-105258 |
low | 3.5 | — | 2026-10-29 | The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several book | |
CVE-2026-108685 |
low | 3.7 | — | 2026-10-29 | The WP Post Author WordPress plugin before 4.2.0 does not check that the account was crea | |
CVE-2026-108686 |
low | 3.7 | — | 2026-10-29 | The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settin | |
CVE-2026-85007 |
low | 3.8 | — | 2026-10-29 | The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability | |
CVE-2026-101415 |
low | 3.1 | 0.0027 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101570 |
low | 3.7 | 0.0031 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webse | |
CVE-2026-50419 |
low | 3.3 | 0.0046 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an aut | |
CVE-2026-50416 |
low | 3.3 | 0.0046 | 2026-10-29 | 2 PoC | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an aut |
CVE-2026-90727 |
low | 3.8 | 0.0026 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 relea | |
CVE-2026-109823 |
low | 2.3 | 0.0037 | 2026-10-29 | An attacker can read the name of filesystem paths of your application present via Tidewave | |
CVE-2026-117510 |
low | 2.1 | 0.0049 | 2026-10-29 | A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is th | |
CVE-2026-116673 |
low | 3.3 | 0.0013 | 2026-10-29 | systeminformation is a System and OS information library for node.js. Prior to 5.33.14, th | |
CVE-2026-57189 |
low | 2.3 | 0.0074 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. In affected depl | |
CVE-2026-57198 |
low | 2.3 | 0.0083 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. In affected depl | |
CVE-2026-67400 |
low | 3.5 | 0.0018 | 2026-10-29 | A missing token type check allowed to retrieve more additional information about the WOPI | |
CVE-2026-77171 |
low | 3.5 | 0.0016 | 2026-10-29 | A public shared collective always allowed recipients of the link to create pages. | |
CVE-2026-82983 |
low | 3.3 | 0.0011 | 2026-10-29 | The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not v | |
CVE-2026-108311 |
low | 2.7 | 0.0024 | 2026-10-29 | Tanium addressed an insufficient logging vulnerability in Tanium Server. | |
CVE-2026-108330 |
low | 3.6 | 0.0013 | 2026-10-29 | Tanium addressed an information disclosure vulnerability in Threat Response Client Extensi | |
CVE-2026-108331 |
low | 3.3 | 0.0014 | 2026-10-29 | Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. | |
CVE-2026-108333 |
low | 2.5 | 0.0013 | 2026-10-29 | Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. | |
CVE-2026-103995 |
low | 2.0 | 0.0036 | 2026-10-29 | Response body and chunk parsing would handle non-hex or negative integers incorrectly whic | |
CVE-2026-116687 |
low | 3.1 | 0.0025 | 2026-10-29 | CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 u | |
CVE-2026-116696 |
low | 3.3 | 0.0011 | 2026-10-29 | russh is a Rust SSH client and server library that includes an SSH agent protocol implemen | |
CVE-2026-116775 |
low | 2.3 | 0.0029 | 2026-10-29 | pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and | |
CVE-2026-57199 |
low | 2.3 | 0.0048 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-118129 |
low | 2.1 | 0.0034 | 2026-10-29 | A vulnerability was found in jeremyckahn Chitchatter up to f82538633813c854a81a8b2112a2f6b | |
CVE-2026-106647 |
low | 3.8 | 0.0015 | 2026-10-29 | The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not scope a contact | |
CVE-2026-110507 |
low | 2.7 | 0.0016 | 2026-10-29 | The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not restrict the query | |
CVE-2026-111032 |
low | 3.8 | 0.0015 | 2026-10-29 | The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly verify authorizati | |
CVE-2026-111961 |
low | 3.8 | 0.0015 | 2026-10-29 | The Royal MCP WordPress plugin before 1.5.10 does not perform an object-level permission | |
CVE-2026-113494 |
low | 2.7 | 0.0016 | 2026-10-29 | The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership | |
CVE-2026-86401 |
low | 2.7 | 0.0019 | 2026-10-29 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through | |
CVE-2026-90719 |
low | 2.7 | 0.0019 | 2026-10-29 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through | |
CVE-2026-90721 |
low | 3.4 | 0.0012 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 relea | |
CVE-2026-90723 |
low | 2.7 | 0.0019 | 2026-10-29 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through | |
CVE-2026-90724 |
low | 2.7 | 0.0019 | 2026-10-29 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through | |
CVE-2026-101272 |
low | 2.3 | — | 2026-10-29 | The mechanism binding files generated during a shredding process to the authentication met | |
CVE-2026-87098 |
low | 3.1 | — | 2026-10-29 | Sensitive information disclosure due to improper authorization. The following products are | |
CVE-2026-87100 |
low | 3.6 | — | 2026-10-29 | Protection mechanism failure due to missing binary hardening in Linux executables. The fol | |
CVE-2026-21830 |
low | 3.7 | — | 2026-10-29 | HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may caus | |
CVE-2026-103394 |
low | 3.7 | — | 2026-10-29 | An Improper Initialization vulnerability in the SSR software in Juniper Networks Session S | |
CVE-2026-118608 |
low | 3.5 | — | 2026-10-29 | Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information | |
CVE-2026-105612 |
low | 3.5 | — | 2026-10-29 | PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read | |
CVE-2026-105615 |
low | 3.5 | — | 2026-10-29 | PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privil | |
CVE-2026-118256 |
low | 2.1 | — | 2026-10-29 | Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 an | |
CVE-2026-118258 |
low | 3.7 | — | 2026-10-29 | i18next-http-backend is a backend layer for i18next that loads translation resources in No |