Sources:
amazon_linux
archlinux
azure_linux
bitnami_vulndb
capec
capec_enrichment_dashboard
certeu
certfr
circl_kev
cisa_known_exploited
cna_scorecard
cnvd
csaf_abb
csaf_adstecindustrialitgmbh
csaf_amd
csaf_aumariestergmbhcokg
csaf_baadem2mproductsgmbh
csaf_beckhoffautomationgmbhcokg
csaf_bendergmbhcokg
csaf_bosch
csaf_bsi
csaf_bsi_aggregator
csaf_bsi_cvd_white
csaf_bsi_white
csaf_bsi_wid_white
csaf_carlogavazziautomation
csaf_certbund
csaf_certvde
csaf_cisa
csaf_cisa_it
csaf_cisa_ot
csaf_cisco
csaf_claaskgaa
csaf_codesysgmbh
csaf_dell
csaf_duraggmbh
csaf_endresshauserag
csaf_ericsson
csaf_euchnergmbhcokg
csaf_festosecokg
csaf_frauschersensortechnikgmbh
csaf_hancom
csaf_harmaninternational
csaf_helmholzgmbhcokg
csaf_himapaulhildebrandtgmbh
csaf_hitachi
csaf_hpe
csaf_huawei
csaf_hydacinternationalgmbh
csaf_ibm
csaf_ifmelectronicgmbh
csaf_janitzaelectronicsgmbh
csaf_jumogmbhcokg
csaf_juniper
csaf_kebautomationkg
csaf_kukaag
csaf_lenovo
csaf_lenzese
csaf_mbconnectlinegmbh
csaf_mettlertoledogmbh
csaf_metzconnectgmbh
csaf_microsoft
csaf_mieleciekg
csaf_moxa
csaf_murrelektronikgmbh
csaf_ncscnl
csaf_ndaal
csaf_netapp
csaf_nozomi
csaf_nozominetworks
csaf_nvidia
csaf_opcfoundation
csaf_openeuler
csaf_opensuse
csaf_oracle
csaf_ox
csaf_paloalto
csaf_panasonic
csaf_pentagrid
csaf_pepperlfuchsse
csaf_phoenix
csaf_pilzgmbhcokg
csaf_qnap
csaf_redhat
csaf_samsung
csaf_sauterag
csaf_schneider
csaf_sick
csaf_siemens
csaf_smasolartechnologyag
csaf_suse
csaf_swarcotrafficsystemsgmbh
csaf_synology
csaf_tibco
csaf_trend
csaf_trumpfsecokg
csaf_trustsource
csaf_tuxcare
csaf_ubiquiti
csaf_vartastoragegmbh
csaf_vegagrieshaberkg
csaf_vmware
csaf_wagogmbhcokg
csaf_weidmuellerinterfacegmbhcokg
csaf_welotecgmbh
csaf_wiesemanntheisgmbh
csaf_yaskawaeuropegmbh
csaf_yokogawa
csaf_zyxel
cve_forecast
cve_icu
cve_vs_github_dashboard
cvelistv5
cwe_dashboard
cwe_enrichment
cwec
debian_security_tracker
drupal
emb3d
emb3d_dashboard
epss_dashboard
epss_history
epss_kev_enrichment
euvd_kev
fedora
fkie_nvd
freebsd
gcve
gcve_enriched
gcve_enrichment
gcve_enrichment_dashboard
gentoo
github
gsd
jvn
kev_ransomware
mitre_attack
moksha
ndaal_kev
netbsd
nuclei_dashboard
nuclei_enrichment
nvd
nvd_cpe_dictionary
openbsd
opencve
oracle_linux
ossf_malicious_packages
osv_almalinux
osv_alpine
osv_bellsoft
osv_chainguard
osv_cran
osv_github_actions
osv_golang
osv_haskell
osv_hex
osv_maven
osv_npm
osv_nuget
osv_ocaml
osv_ossfuzz
osv_packagist
osv_pub
osv_rocky
osv_rubygems
osv_rustsec
osv_swift
osv_ubuntu
osv_wolfi
publish_stats
pysec
sadp_pilot
ssvc
ssvc_dashboard
tailscale
tsunami_enrichment
variot
vulnrichment
Clear
| ID | Title | Severity | CVSS | Source | Updated |
|---|---|---|---|---|---|
| cve-2026-95820 | cve-2026-95820 | MEDIUM | 6.3 | cvelistv5 | unknown |
| cve-2026-79677 | Apache Tomcat: WebSocket DoS due to lost asynchronous write timeout | HIGH | 7.5 | cvelistv5 | 2026-09-23 |
| cve-2026-96600 | cve-2026-96600 | MEDIUM | 5.5 | cvelistv5 | unknown |
| cve-2026-93342 | MarketKing < 2.1.72 Missing Authorization via marketking_duplicate_product AJAX | MEDIUM | 5.3 | cvelistv5 | 2026-09-23 |
| cve-2026-26825 | libxls: libxls: Information disclosure via use of uninitialized memory | LOW | 3.9 | cvelistv5 | 2026-06-28 |
| cve-2026-80145 | Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password | CRITICAL | 9.4 | cvelistv5 | 2026-09-23 |
| cve-2026-26824 | libxls: libxls: Information disclosure via crafted XLS file processing | MEDIUM | 5.6 | cvelistv5 | 2026-06-28 |
| cve-2026-80150 | Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl Parameter | HIGH | 7.7 | cvelistv5 | 2026-09-23 |
| cve-2026-47116 | cve-2026-47116 | CRITICAL | 9.8 | cvelistv5 | unknown |
| cve-2026-78383 | Apache Tomcat: AJP DoS via missing request body | HIGH | 7.5 | cvelistv5 | 2026-09-23 |
| cve-2026-80156 | Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass | CRITICAL | 9.4 | cvelistv5 | 2026-09-23 |
| cve-2026-43641 | Softaculous Virtualizor OS Command Injection via Billing Module Handler | CRITICAL | 9.3 | cvelistv5 | 2026-09-23 |
| cve-2026-77762 | Apache Tomcat: Stale HPACK emitter injects trailers into recycled pooled Request | HIGH | 8.1 | cvelistv5 | 2026-09-23 |
| cve-2026-95812 | ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters | MEDIUM | 5.3 | cvelistv5 | 2026-09-23 |
| cve-2026-76183 | Apache Tomcat: Bypass of security constraints for WebSocket endpoints | CRITICAL | 9.8 | cvelistv5 | 2026-09-23 |
| cve-2026-86247 | Apache Tomcat Native: Client certificate requirements can be down-graded | HIGH | 7.4 | cvelistv5 | 2026-09-23 |
| cve-2026-3418 | Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution | CRITICAL | 9.1 | cvelistv5 | 2026-09-23 |
| cve-2026-86246 | Apache Tomcat Native: Insecure OpenSSL options enabled | CRITICAL | 9.1 | cvelistv5 | 2026-09-23 |
| cve-2026-75973 | Apache Tomcat: Cross-context authentication mix-up with Jakarta Authentication configured | HIGH | 7.3 | cvelistv5 | 2026-09-23 |
| cve-2026-86243 | Apache Tomcat Native: DoS via TLS handshake | HIGH | 7.5 | cvelistv5 | 2026-09-23 |
| cve-2026-96276 | flatpak: flatpak: Arbitrary write in host context via flatpak build-init | UNKNOWN | cvelistv5 | 2026-09-23 | |
| cve-2025-13590 | Authenticated arbitrary file upload via a System REST API requiring administrator permission. | CRITICAL | 9.1 | cvelistv5 | 2026-09-23 |
| cve-2026-18161 | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | MEDIUM | 4.3 | cvelistv5 | 2026-09-23 |
| cve-2026-77987 | GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery | CRITICAL | 9.3 | cvelistv5 | 2026-09-23 |
| cve-2026-91809 | Foxit PDF Editor/Reader Annotation Use-After-Free Information Disclosure Vulnerability | HIGH | 7.8 | cvelistv5 | 2026-09-23 |
| cve-2026-91808 | Foxit PDF Editor/Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | MEDIUM | 6.1 | cvelistv5 | 2026-09-23 |
| cve-2026-91797 | Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution Vulnerability | HIGH | 7.8 | cvelistv5 | 2026-09-23 |
| cve-2026-42801 | Deference after null check in as_rrc | HIGH | 7.4 | cvelistv5 | 2026-09-23 |
| cve-2026-95676 | AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass | HIGH | 7.4 | cvelistv5 | 2026-09-23 |
| cve-2026-86681 | cve-2026-86681 | HIGH | 7.6 | cvelistv5 | unknown |