CVE Watch367,144 in full archive

Vulnerabilities exploitable today

367,144in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,685

New KEV · 24H0

Exploit Today ≥ 701,629

Distribution · last window

Critical
2,256
High
9,258
Medium
5,266
Low
507

Filters

Window

Severity

Flags

Vulnerabilities367,081–367,120 · 367,144

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-51276—

—

——0Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.31d CVE-2023-41083—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused4d CVE-2023-40149—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused4d CVE-2026-18932—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.17d CVE-2023-54370—

—

——0Rejected reason: This CVE ID has been rejected.20d CVE-2026-22655—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.21d CVE-2026-16339—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.33d CVE-2023-27508—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused4d CVE-2026-22656—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.21d CVE-2026-23691—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.21d CVE-2026-51238—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.25d CVE-2026-29032—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.21d CVE-2026-71982—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.7d CVE-2023-20914—

0.0%

——0——CVE-2026-198546.1 MED

0.0%

——0When the ClickHouse plugin uses Native protocol (the default) with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never checked, and a configured client certificate is not sent.4d CVE-2023-27880—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused4d CVE-2026-826577.5 HIG

—

——0Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for forum and announcements modules. Unauthenticated attackers can retrieve forum topics and announcements by sending GET requests to rss/forum.php or rss/announcements.php, disclosing titles, full post text, author names, and timestamps.21h CVE-2026-61605—

—

——0Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-58655. Reason: This candidate is a duplicate of CVE-2026-58655. Notes: All CVE users should reference CVE-2026-58655 instead of this candidate.47d CVE-2026-78699—

—

——0Unchecked Return Value vulnerability in ash-project ash_postgres allows a user who can drive a tenant rename to a name that collides with an existing tenant's schema to have their tenant record repointed at that other tenant's live schema, gaining access to its data. AshPostgres.MultiTenancy.rename_tenant/3 issues the ALTER SCHEMA ... RENAME TO ... with the non-raising Ecto.Adapters.SQL.query/2, discards its {:ok, _} | {:error, _} result, and unconditionally returns :ok. PostgreSQL rejects the rename when the target schema already exists (and on insufficient privilege or lock timeout), but that failure never reaches the caller. The calling manage_tenant update action therefore sees success and commits the tenant row with the new name, which is the schema of a different existing tenant, so subsequent reads and writes for that tenant run against the other tenant's data. This issue affects ash_postgres: from 0.25.0 before 2.13.0.20h CVE-2026-19684—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.9d CVE-2026-29030—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.21d CVE-2026-825498.3 HIG

—

——0A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might be used.20h CVE-2025-25275—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused19d CVE-2026-61692—

—

——0Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61454. Reason: This candidate is a duplicate of CVE-2026-61454. Notes: All CVE users should reference CVE-2026-61454 instead of this candidate.49d CVE-2026-29029—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.21d CVE-2026-62164—

—

——0Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-60087. Reason: This candidate is a duplicate of CVE-2026-60087. Notes: All CVE users should reference CVE-2026-60087 instead of this candidate.47d CVE-2026-825476.5 MED

—

——0A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has been made public and could be used.21h CVE-2023-49605—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused4d CVE-2026-9321—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.10d CVE-2026-816838.4 HIG

0.0%

——0openssl_encrypt (pip package openssl-encrypt) versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable (0644) SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access can read the exposed private key. Version 1.4.9 writes the PEM to a dedicated 0600 file, keeps only its path in SharedPreferences, and migrates/scrubs existing cleartext values.3d CVE-2026-50268—

0.0%

——0——CVE-2023-24013—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused4d CVE-2026-72858—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.11d CVE-2026-0121—

0.0%

——0——CVE-2023-27883—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused4d CVE-2025-21473—

0.0%

——0——CVE-2026-68576—

—

——0Rejected reason: Reserved via standalone CLI outside the OSIM flaw workflow; releasing so the CVE ID can be properly reserved and linked through OSIM when the flaw is worked.31d CVE-2023-54376—

—

——0Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.26d