CVEs
Common Vulnerabilities & Exposures ingested from CVE Project cvelistV5, NVD and EUVD. Filter by year or search by ID / title.
249367 CVEs matched. Showing 1–50 (page 1 of 4988).
HIGH and CRITICAL CVEs are auto-promoted to the Threats table; the Threat column below shows the link when a promotion exists.
Click a column header to sort all results; click the active column again to reverse.
| CVE-ID ↕ | Title ↕ | Severity ↕ | Score (overview) ↕ | NVD Score | MSRC Score | CNA ↕ | Published ↕ | Remediations | Threat | Source |
|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-111464 |
WP Fastest Cache <= 1.5.3 - Unauthenticated Sensitive Information Exposure via Cached wp-activate.php Response | MEDIUM | 5.9 | — | — | Wordfence | 2026-11-03 | — | — | raw · ⬇ |
CVE-2026-120831 |
Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service | MEDIUM | 6.5 | — | — | redhat | 2026-11-03 | — | — | raw · ⬇ |
CVE-2026-76955 |
CVE-2026-76955 | HIGH | 8.8 | — | — | Zyxel | 2026-11-03 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-107441 |
CVE-2026-107441 | HIGH | 8.8 | — | — | Zyxel | 2026-11-03 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-105770 |
Octo STS discloses trust policy contents to unauthorized callers via Exchange error messages | MEDIUM | 5.3 | — | — | chainguard | 2026-11-03 | — | — | raw · ⬇ |
CVE-2026-120833 |
labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-Dispatch | HIGH | 8.5 | — | — | VulnCheck | 2026-11-03 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-120830 |
Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure | HIGH | 7.4 | — | — | redhat | 2026-11-03 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-71450 |
CVE-2026-71450 | HIGH | 8.7 | — | — | jci | 2026-11-02 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-120597 |
Welcart e-Commerce Plugin paymentESCOTT.main.class.php error_page_message cross site scripting | MEDIUM | 5.3 | — | — | VulDB | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-120752 |
PyMuPDF 1.25.3 before 2.0 Stack Buffer Overflow via add_freetext_annot() Callout | HIGH | 7.7 | — | — | VulnCheck | 2026-11-02 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-120740 |
Hivex: hivex: denial of service via out-of-bounds read in big-data block processing | LOW | 2.0 | — | — | redhat | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-115215 |
NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spo… | HIGH | 8.7 | — | — | eclipse | 2026-11-02 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-116635 |
Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP… | MEDIUM | 6.9 | — | — | AMZN | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-86596 |
s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter | CRITICAL | 9.8 | — | — | Wordfence | 2026-11-02 | 9 | ⚠ Threat | raw · ⬇ |
CVE-2026-120091 |
Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen … | HIGH | 8.7 | — | — | Temporal | 2026-11-02 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-105476 |
CVE-2026-105476 | — | — | — | — | hackerone | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-105475 |
CVE-2026-105475 | HIGH | 8.7 | — | — | hackerone | 2026-11-02 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-116958 |
Konflux-ci: unquoted variable expansion in shell command execution | MEDIUM | 6.7 | — | — | redhat | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-58873 |
CVE-2026-58873 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-120503 |
EchoHS GeekezBrowser Public API status information disclosure | MEDIUM | 4.8 | — | — | VulDB | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-116768 |
Missing length validation in Absolute Secure Access | HIGH | 7.1 | — | — | Absolute | 2026-11-02 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-58977 |
CVE-2026-58977 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-29508 |
ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF Parser | HIGH | 8.7 | — | — | VulnCheck | 2026-11-02 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-116767 |
Improper input handling in Secure Access servers | HIGH | 7.1 | — | — | Absolute | 2026-11-02 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-58930 |
CVE-2026-58930 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-58927 |
CVE-2026-58927 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-58926 |
CVE-2026-58926 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-58925 |
CVE-2026-58925 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-58924 |
CVE-2026-58924 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-58915 |
CVE-2026-58915 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-49906 |
CVE-2026-49906 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-49903 |
CVE-2026-49903 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-116766 |
Improper input handling in Secure Access server | HIGH | 8.3 | — | — | Absolute | 2026-11-02 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-16305 |
CVE-2026-16305 | — | — | — | — | certcc | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-91901 |
CVE-2026-91901 | LOW | 3.5 | — | — | dell | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-91896 |
CVE-2026-91896 | LOW | 3.9 | — | — | dell | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-86365 |
CVE-2026-86365 | MEDIUM | 4.2 | — | — | dell | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-116769 |
Authentication bypass in Secure Access Servers | CRITICAL | 9.3 | — | — | Absolute | 2026-11-02 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-91900 |
CVE-2026-91900 | MEDIUM | 5.8 | — | — | dell | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-91899 |
CVE-2026-91899 | MEDIUM | 6.4 | — | — | dell | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-91897 |
CVE-2026-91897 | MEDIUM | 6.4 | — | — | dell | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-97718 |
CSRF in Secure Access Server v14.60 | CRITICAL | 9.4 | — | — | Absolute | 2026-11-02 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-91894 |
CVE-2026-91894 | MEDIUM | 6.7 | — | — | dell | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-91895 |
CVE-2026-91895 | HIGH | 7.1 | — | — | dell | 2026-11-02 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-59048 |
CVE-2026-59048 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-59047 |
CVE-2026-59047 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-59046 |
CVE-2026-59046 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-59045 |
CVE-2026-59045 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-59044 |
CVE-2026-59044 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |
CVE-2026-59043 |
CVE-2026-59043 | — | — | — | — | google_android | 2026-11-02 | — | — | raw · ⬇ |