Browse All CVEs
1,853 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-19370 |
low | 1.9 | 0.0017 | 2026-10-29 | A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function | |
CVE-2026-12372 |
low | 3.7 | 0.0026 | 2026-10-29 | A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and | |
CVE-2026-19371 |
low | 1.9 | 0.0020 | 2026-10-29 | A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the fu | |
CVE-2026-19372 |
low | 1.9 | 0.0021 | 2026-10-29 | A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. A | |
CVE-2026-19373 |
low | 1.9 | 0.0017 | 2026-10-29 | A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by t | |
CVE-2026-19375 |
low | 2.1 | 0.0045 | 2026-10-29 | A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability a | |
CVE-2026-19378 |
low | 2.1 | 0.0047 | 2026-10-29 | A vulnerability was found in code-projects Task Management System 1.0. This issue affects | |
CVE-2026-19380 |
low | 1.8 | 0.0017 | 2026-10-29 | A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is th | |
CVE-2026-19382 |
low | 1.8 | 0.0017 | 2026-10-29 | A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystem | |
CVE-2026-64941 |
low | 2.1 | 0.0060 | 2026-10-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoe | |
CVE-2026-18503 |
low | 2.4 | 0.0012 | 2026-10-29 | Attacker-controlled CSV samples can trigger super-linear regular-expression work during d | |
CVE-2026-11809 |
low | 3.7 | 0.0035 | 2026-10-29 | The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / | |
CVE-2026-11811 |
low | 3.7 | 0.0040 | 2026-10-29 | The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/up | |
CVE-2026-11812 |
low | 2.5 | 0.0010 | 2026-10-29 | The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update | |
CVE-2026-44762 |
low | 3.7 | 0.0019 | 2026-10-29 | SAP Data Services Management Console allows an overly permissive Content Security Policy ( | |
CVE-2026-58239 |
low | 3.7 | 0.0035 | 2026-10-29 | SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauth | |
CVE-2026-58245 |
low | 3.8 | 0.0029 | 2026-10-29 | SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credentia | |
CVE-2026-66774 |
low | 3.7 | 0.0035 | 2026-10-29 | SAP Approuter does not consistently handle certain error conditions. An attacker with low | |
CVE-2026-11985 |
low | 3.6 | 0.0013 | 2026-10-29 | On the Zephyr ARM port, enabling the hardware FPU (CONFIG_FPU) forces the "Floating point | |
CVE-2026-73157 |
low | 2.3 | 0.0044 | 2026-10-29 | Affected versions of cti-transmute render data obtained from a remote MISP instance into t | |
CVE-2026-11733 |
low | 1.1 | 0.0078 | 2026-10-29 | A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator | |
CVE-2026-11734 |
low | 1.1 | 0.0089 | 2026-10-29 | A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin | |
CVE-2026-73087 |
low | 2.3 | 0.0046 | 2026-10-29 | Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBl | |
CVE-2026-18703 |
low | 2.3 | 0.0014 | 2026-10-29 | An issue in MongoDB Server could allow a party with a valid client certificate and a corre | |
CVE-2024-14042 |
low | 2.1 | 0.0050 | 2026-10-29 | A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s | |
CVE-2026-65655 |
low | 2.3 | 0.0037 | 2026-10-29 | When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy | |
CVE-2026-73281 |
low | 3.5 | 0.0016 | 2026-10-29 | In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended | |
CVE-2026-73283 |
low | 2.5 | 0.0015 | 2026-10-29 | In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to | |
CVE-2026-64951 |
low | 3.5 | 0.0028 | 2026-10-29 | A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attemp | |
CVE-2026-70467 |
low | 3.8 | 0.0026 | 2026-10-29 | A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM | |
CVE-2026-49262 |
low | 3.0 | 0.0017 | 2026-10-29 | In the Aimeos Pagible content management system prior to version 0.10.4, the administrativ | |
CVE-2026-65926 |
low | 3.1 | 0.0024 | 2026-10-29 | An anonymous caller when anonymous access is enabled, or a low-privilege authenticated use | |
CVE-2026-18096 |
low | 3.3 | 0.0013 | 2026-10-29 | IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a loc | |
CVE-2026-73425 |
low | 3.7 | 0.0027 | 2026-10-29 | Astro is a web framework for content-driven websites. Prior to 8.1.2, the Astro Netlify ad | |
CVE-2026-73427 |
low | 2.1 | 0.0057 | 2026-10-29 | Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1 | |
CVE-2026-73491 |
low | 2.3 | 0.0039 | 2026-10-29 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragm | |
CVE-2026-73492 |
low | 2.3 | 0.0039 | 2026-10-29 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragm | |
CVE-2026-48791 |
low | 2.0 | 0.0007 | 2026-10-29 | sigstore-java is a sigstore java client for interacting with sigstore infrastructure. Vers | |
CVE-2026-0289 |
low | 0.5 | 0.0031 | 2026-10-29 | A security bypass vulnerability in the Account Protection feature of Palo Alto Networks P | |
CVE-2026-0290 |
low | 0.5 | 0.0015 | 2026-10-29 | An information disclosure vulnerability in the Account Protection feature of Palo Alto Ne | |
CVE-2026-0291 |
low | 1.1 | 0.0015 | 2026-10-29 | An improper link resolution before file access vulnerability exists in the Palo Alto Netwo | |
CVE-2026-0292 |
low | 2.1 | 0.0019 | 2026-10-29 | An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® | |
CVE-2026-75011 |
low | 2.1 | 0.0182 | 2026-10-29 | A flaw has been found in kylecui NetForensicMCP 2.1.0. Impacted is the function execAsync | |
CVE-2026-75077 |
low | 2.1 | 0.0047 | 2026-10-29 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Af | |
CVE-2026-75078 |
low | 2.1 | 0.0047 | 2026-10-29 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1. | |
CVE-2026-75081 |
low | 2.1 | 0.0037 | 2026-10-29 | A vulnerability was detected in Webkul Bagisto up to 2.4.4. Impacted is an unknown functio | |
CVE-2026-75082 |
low | 2.1 | 0.0045 | 2026-10-29 | A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown fu | |
CVE-2026-75086 |
low | 2.1 | 0.0033 | 2026-10-29 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacte | |
CVE-2026-75087 |
low | 2.1 | 0.0033 | 2026-10-29 | A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an | |
CVE-2026-75088 |
low | 2.1 | 0.0033 | 2026-10-29 | A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impact |