Search
545 CVEs · published 2026-10-29 to 2026-10-29
CVEs (545, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 1–25 of 545 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-92744 | HIGH | — | 2026-10-29 | Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem. | |
| CVE-2026-112211 | NONE | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-107239 | HIGH | — | 2026-10-29 | A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for… | |
| CVE-2026-107238 | HIGH | — | 2026-10-29 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Mic… | |
| CVE-2023-22793 | CRITICAL | — | 2026-10-29 | A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Manageme… | |
| CVE-2026-61719 | HIGH | Patched | 8.9 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored cross-site scripting vulnerability in `saude/historico_prontuarios.php` arises because the `tex… |
| CVE-2026-61707 | CRITICAL | Patched | 9.0 | 2026-10-29 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates u… |
| CVE-2026-61673 | MEDIUM | Patched | — | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in `web/html/memorando/listar_despachos.php` results fro… |
| CVE-2026-61671 | HIGH | 8.1 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to the advisory's stated patched version 3.8.7, the `/controle/control.php` dispatch endpoint accepts attacker-con… | |
| CVE-2026-61654 | HIGH | — | 2026-10-29 | Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook `POST /api/v1/projects/{projectUuid}/dbt-cloud/webh… | |
| CVE-2026-61645 | CRITICAL | 9.1 | 2026-10-29 | Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the `Upload API` arises because the AP… | |
| CVE-2026-45049 | HIGH | Patched | 8.3 | 2026-10-29 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Sign-On` (`CDSSO`) servlet allows a logged-in user's raw OpenAM … |
| CVE-2026-119317 | MEDIUM | 6.5 | 2026-10-29 | On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the scanner host with the privileges of the nessusd proc… | |
| CVE-2026-119286 | HIGH | Patched | 7.5 | 2026-10-29 | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate() reuses a module-level ValidationAbortedError when a document … |
| CVE-2026-119285 | MEDIUM | Patched | 5.9 | 2026-10-29 | Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain wildcard matcher in middleware/cors/utils.go strips… |
| CVE-2026-119284 | MEDIUM | Patched | — | 2026-10-29 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.7.6, joserfc compact JWS deserializat… |
| CVE-2026-119283 | HIGH | Patched | 7.5 | 2026-10-29 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.7.5, joserfc.jwe.decrypt_json() accep… |
| CVE-2026-119282 | HIGH | Patched | — | 2026-10-29 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from 21.0.0 until 22.7.9 and 23.1.2 for @nx/gradle, … |
| CVE-2026-115943 | NONE | Patched | — | 2026-10-29 | Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt. When a number format has a condition such as … |
| CVE-2026-61576 | HIGH | — | 2026-10-29 | Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook `POST /api/v1/projects/{projectUuid}/dbt-cloud/webh… | |
| CVE-2026-13303 | HIGH | Patched | 8.7 | 2026-10-29 | HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store integration that may allow an authenticated user wi… |
| CVE-2026-119325 | HIGH | 7.5 | 2026-10-29 | Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_popup_content REST endpoint that allows anonymous atta… | |
| CVE-2026-119281 | MEDIUM | Patched | 5.9 | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the connector assumed resul… |
| CVE-2026-119280 | LOW | Patched | 3.7 | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the MariaDbPoolConnection.r… |
| CVE-2026-119279 | MEDIUM | Patched | 5.9 | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.10, the ReadableByteBuf.readLen… |