[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-63148 | 13 Oct 2026 | CVSS 5.4 | Omnispace Agora ProjectOmnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject HTML/script… | |
| CVE-2026-63149 | 13 Oct 2026 | CVSS 7.4 | Omnispace Agora ProjectOmnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict temporary or default account… | |
| CVE-2026-63152 | 13 Oct 2026 | CVSS 8.1 | Omnispace Agora ProjectOmnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious… | |
| CVE-2026-63153 | 13 Oct 2026 | CVSS 8.1 | Omnispace Agora ProjectOmnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attackers to… | |
| CVE-2026-48383 | 13 Oct 2026 | CVSS 10.0 | Adobe Experience Manager as a Cloud ServiceAdobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the… | |
| CVE-2026-48398 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating… | |
| CVE-2026-55601 | 13 Oct 2026 | CVSS 7.3 | folkertvanheusden multitailMultiTail is a utility for monitoring multiple log files in one terminal. In version 7.1.5 and earlier, the -ex and -eX execute-on-match feature… | |
| CVE-2026-56826 | 13 Oct 2026 | CVSS 5.4 | shopperlabs shopperShopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could reach the Settings pages with only access_setting… | |
| CVE-2026-16753 | 13 Oct 2026 | CVSS 8.8 | LowcoderIncorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated… | |
| CVE-2026-48382 | 13 Oct 2026 | CVSS 10.0 | Adobe Experience Manager as a Cloud ServiceAdobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the… | |
| CVE-2026-110083 | 13 Oct 2026 | CVSS 7.1 | Adobe Experience Manager 6.5Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that… | |
| CVE-2026-110084 | 13 Oct 2026 | CVSS 7.1 | Adobe Experience Manager 6.5Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in a Security feature bypass. A… | |
| CVE-2026-110074 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating… | |
| CVE-2026-110075 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating… | |
| CVE-2026-110076 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating… | |
| CVE-2026-110077 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating… | |
| CVE-2026-110078 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating… | |
| CVE-2026-110079 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating… | |
| CVE-2026-110080 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating… | |
| CVE-2026-110081 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… | |
| CVE-2026-110082 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a… | |
| CVE-2026-109415 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… | |
| CVE-2026-110005 | 13 Oct 2026 | CVSS 8.8 | KomodoThe `periphery` agent's container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated… | |
| CVE-2026-110037 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… | |
| CVE-2026-110073 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… | |
| CVE-2026-106634 | 13 Oct 2026 | CVSS 7.7 | Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could… | |
| CVE-2026-107305 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… | |
| CVE-2026-107682 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating… | |
| CVE-2026-106626 | 13 Oct 2026 | CVSS 9.1 | Adobe Experience Manager as a Cloud ServiceAdobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of… | |
| CVE-2026-106628 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating… | |
| CVE-2026-106629 | 13 Oct 2026 | CVSS 9.3 | Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious… | |
| CVE-2026-106630 | 13 Oct 2026 | CVSS 9.3 | Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious… | |
| CVE-2026-106631 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… | |
| CVE-2026-106632 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating… | |
| CVE-2026-106633 | 13 Oct 2026 | CVSS 5.4 | Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… | |
| CVE-2026-105895 | 13 Oct 2026 | CVSS 9.9 | Adobe Experience Manager 6.5Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of… | |
| CVE-2026-103854 | 13 Oct 2026 | CVSS 7.8 | Adobe DimensionDimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-103855 | 13 Oct 2026 | CVSS 5.5 | Adobe DimensionDimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit… | |
| CVE-2026-104252 | 13 Oct 2026 | CVSS 9.8 | Vitess vttablet /twopcz reflected XSSVitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in… | Fix |
| CVE-2026-104585 | 13 Oct 2026 | CVSS 9.8 | VulnerabilityMobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module. | |
| CVE-2026-103846 | 13 Oct 2026 | CVSS 8.6 | Adobe DimensionDimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution… | |
| CVE-2026-103847 | 13 Oct 2026 | CVSS 8.6 | Adobe DimensionDimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An… | |
| CVE-2026-103848 | 13 Oct 2026 | CVSS 9.9 | Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability… | |
| CVE-2026-103850 | 13 Oct 2026 | CVSS 5.5 | Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… | |
| CVE-2026-103851 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the… | |
| CVE-2026-103852 | 13 Oct 2026 | CVSS 5.5 | Adobe Substance 3D StagerSubstance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could… | |
| CVE-2026-103853 | 13 Oct 2026 | CVSS 5.5 | Adobe DimensionDimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this… | |
| CVE-2026-103837 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-103838 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-103839 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-103840 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an… | |
| CVE-2026-103841 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an… | |
| CVE-2026-103842 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an… | |
| CVE-2026-103843 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… | |
| CVE-2026-103844 | 13 Oct 2026 | CVSS 7.8 | Adobe DimensionDimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user… | |
| CVE-2026-103845 | 13 Oct 2026 | CVSS 8.6 | Adobe DimensionDimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the… | |
| CVE-2026-103830 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the… | |
| CVE-2026-103832 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-103833 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-103834 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-103835 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-103836 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-102855 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-102234 | 13 Oct 2026 | CVSS 7.4 | Microsoft Visual Studio CodeReliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | |
| CVE-2026-102235 | 13 Oct 2026 | CVSS 8.8 | Microsoft Visual Studio CodeImproper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-102238 | 13 Oct 2026 | CVSS 9.6 | Microsoft Visual Studio CodeImproper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code… | |
| CVE-2026-97844 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97839 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97840 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97841 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97842 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97843 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97833 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97834 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97835 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97836 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97837 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97838 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97828 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97829 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97830 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 11 version 23H2Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. | |
| CVE-2026-97831 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97832 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97823 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97824 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97825 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97826 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97827 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97816 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1809Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97817 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97819 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97820 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97821 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97822 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-97809 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-97810 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 Version 24H2Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-97811 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-97812 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 21H2Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-97813 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1809Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. | Fix |
| CVE-2026-97814 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | Fix |
Page 62 of 168