Browse All CVEs
10,557 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-49331 |
medium | 6.5 | 0.0019 | 2026-10-29 | A flaw was found in openshift/oauth-proxy. On paths configured to bypass authentication (s | |
CVE-2026-50749 |
medium | 6.5 | 0.0047 | 2026-10-29 | Improper Authorization vulnerability in Apache Answer. This issue affects Apache Answer: | |
CVE-2026-70595 |
medium | 4.0 | 0.0028 | 2026-10-29 | Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue | |
CVE-2026-70596 |
medium | 4.3 | 0.0032 | 2026-10-29 | Ghost is a Node.js content management system. From 4.9.0 until 6.54.1, an input validation | |
CVE-2026-20028 |
medium | 5.0 | 0.0035 | 2026-10-29 | A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an | |
CVE-2026-20289 |
medium | 6.5 | 0.0033 | 2026-10-29 | A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, loc | |
CVE-2026-20294 |
medium | 6.5 | 0.0021 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager cou | |
CVE-2026-20308 |
medium | 4.3 | 0.0044 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow | |
CVE-2026-20311 |
medium | 6.3 | 0.0025 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow | |
CVE-2026-7646 |
medium | 6.5 | 0.0050 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server | |
CVE-2026-70429 |
medium | 6.5 | 0.0042 | 2026-10-29 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user name | |
CVE-2026-70433 |
medium | 4.3 | 0.0027 | 2026-10-29 | Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers | |
CVE-2026-70434 |
medium | 4.2 | 0.0011 | 2026-10-29 | A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and | |
CVE-2026-70435 |
medium | 4.2 | 0.0019 | 2026-10-29 | A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attacke | |
CVE-2026-70436 |
medium | 4.3 | 0.0029 | 2026-10-29 | Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission | |
CVE-2026-70438 |
medium | 4.3 | 0.0027 | 2026-10-29 | A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlie | |
CVE-2026-70439 |
medium | 6.5 | 0.0027 | 2026-10-29 | Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, a | |
CVE-2026-70440 |
medium | 5.4 | 0.0023 | 2026-10-29 | Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape use | |
CVE-2026-70441 |
medium | 5.4 | 0.0023 | 2026-10-29 | Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScri | |
CVE-2026-70442 |
medium | 4.3 | 0.0027 | 2026-10-29 | Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the ap | |
CVE-2026-70443 |
medium | 4.3 | 0.0027 | 2026-10-29 | Jenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not set the appropriate | |
CVE-2026-70444 |
medium | 4.3 | 0.0029 | 2026-10-29 | A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earli | |
CVE-2026-70445 |
medium | 4.3 | 0.0027 | 2026-10-29 | Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attacke | |
CVE-2026-70446 |
medium | 4.3 | 0.0027 | 2026-10-29 | Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers wi | |
CVE-2026-70447 |
medium | 4.3 | 0.0027 | 2026-10-29 | Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers | |
CVE-2026-7657 |
medium | 6.5 | 0.0037 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SS | |
CVE-2026-63457 |
medium | 6.5 | 0.0027 | 2026-10-29 | A potential denial of service vulnerability exists in HPE Integrated Lights-Out 6 (iLO 6) | |
CVE-2026-7658 |
medium | 6.5 | 0.0051 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allow | |
CVE-2026-7869 |
medium | 5.4 | 0.0032 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bas | |
CVE-2026-18953 |
medium | 6.3 | 0.0018 | 2026-10-29 | Improper limitation of a pathname to a restricted directory in the get_resource tool in Am | |
CVE-2026-18954 |
medium | 5.7 | 0.0016 | 2026-10-29 | Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP | |
CVE-2026-18958 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b | |
CVE-2026-21766 |
medium | 5.4 | 0.0029 | 2026-10-29 | The default login portlet in HCL Digital Experience and Digital Experience Compose insuffi | |
CVE-2026-66297 |
medium | 5.0 | 0.0241 | 2026-10-29 | Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) v | |
CVE-2026-66885 |
medium | 6.8 | 0.0024 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebook allows an attacke | |
CVE-2026-15996 |
medium | 6.6 | 0.0077 | 2026-10-29 | A denial of service vulnerability was identified in GitHub Enterprise Server that allowed | |
CVE-2026-19023 |
medium | 6.8 | 0.0017 | 2026-10-29 | Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 | |
CVE-2026-19025 |
medium | 6.8 | 0.0017 | 2026-10-29 | H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked d | |
CVE-2026-19026 |
medium | 6.8 | 0.0019 | 2026-10-29 | H5Z__filter_nbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cd_values[0] through cd_ | |
CVE-2026-18969 |
medium | 5.5 | 0.0047 | 2026-10-29 | A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platfor | |
CVE-2026-18970 |
medium | 5.5 | 0.0041 | 2026-10-29 | A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to | |
CVE-2026-19027 |
medium | 6.9 | 0.0019 | 2026-10-29 | The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decomp | |
CVE-2026-19028 |
medium | 6.8 | 0.0019 | 2026-10-29 | H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 prior to 2.3.0 computes the data length | |
CVE-2026-18973 |
medium | 5.5 | 0.0051 | 2026-10-29 | A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted e | |
CVE-2026-18974 |
medium | 5.5 | 0.0053 | 2026-10-29 | A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the fu | |
CVE-2026-18990 |
medium | 5.5 | 0.0069 | 2026-10-29 | A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function o | |
CVE-2026-18991 |
medium | 5.5 | 0.0062 | 2026-10-29 | A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects | |
CVE-2026-18909 |
medium | 5.6 | 0.0011 | 2026-10-29 | A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Sma | |
CVE-2024-10302 |
medium | 5.8 | 0.0029 | 2026-10-29 | The user self-signup flow in multiple WSO2 products fails to adequately validate user-supp | |
CVE-2024-8995 |
medium | 4.9 | 0.0019 | 2026-10-29 | Unused authorization codes issued to deleted users are not being properly invalidated or r |