Search
545 CVEs · published 2026-10-29 to 2026-10-29
CVEs (545, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 101–125 of 545 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-119115 | HIGH | 8.5 | 2026-10-29 | Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 might allow an authenticated remote … | |
| CVE-2026-118765 | HIGH | Patched | — | 2026-10-29 | Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then calls randomize with an empty output buffer while t… |
| CVE-2026-118764 | HIGH | Patched | — | 2026-10-29 | minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to 11.0.1, src/index.ts implements firstPhasePreProcess() so t… |
| CVE-2026-118763 | HIGH | 7.4 | 2026-10-29 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/registry.ts contains a RegistryClient.signIn() method tha… | |
| CVE-2026-118762 | CRITICAL | Patched | 9.3 | 2026-10-29 | Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pull_request_target with repository w… |
| CVE-2026-118761 | HIGH | Patched | 7.5 | 2026-10-29 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives … |
| CVE-2026-118760 | MEDIUM | Patched | 6.5 | 2026-10-29 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.17.0, the frontend artifact routes did not check whet… |
| CVE-2026-118759 | HIGH | Patched | 7.5 | 2026-10-29 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/{run_id}/nodes… |
| CVE-2026-118758 | HIGH | Patched | 7.5 | 2026-10-29 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?sour… |
| CVE-2026-115805 | HIGH | 7.8 | 2026-10-29 | Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation require… | |
| CVE-2026-107060 | NONE | — | 2026-10-29 | Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences. | |
| CVE-2026-107059 | NONE | — | 2026-10-29 | An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled progile, bypassing authen… | |
| CVE-2026-107058 | CRITICAL | 9.8 | 2026-10-29 | An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference state. | |
| CVE-2026-107057 | NONE | — | 2026-10-29 | An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip. | |
| CVE-2026-107056 | NONE | — | 2026-10-29 | Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the … | |
| CVE-2026-107055 | NONE | — | 2026-10-29 | Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files. | |
| CVE-2026-107053 | NONE | — | 2026-10-29 | Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside … | |
| CVE-2026-107052 | HIGH | 7.5 | 2026-10-29 | Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbo… | |
| CVE-2026-107051 | NONE | — | 2026-10-29 | Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate another user's FHEM home-automat… | |
| CVE-2026-107050 | NONE | — | 2026-10-29 | An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to arbitrary code execution. | |
| CVE-2026-107049 | NONE | — | 2026-10-29 | An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supplying a crafted URI string. | |
| CVE-2026-107048 | NONE | — | 2026-10-29 | An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request. | |
| CVE-2026-107047 | HIGH | 7.5 | 2026-10-29 | Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data. | |
| CVE-2026-107046 | NONE | — | 2026-10-29 | A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows attackers to scan internal resources via supplying a cr… | |
| CVE-2026-107045 | NONE | — | 2026-10-29 | Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to arbitrarily read another's Nostr event database. |