Browse All CVEs
10,549 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-69127 |
medium | 6.9 | 0.0070 | 2026-10-29 | Kirby is an open-source content management system. Prior to 4.9.5 and from 5.0.0 through 5 | |
CVE-2026-71848 |
medium | 5.3 | 0.0051 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. From | |
CVE-2026-71850 |
medium | 4.8 | 0.0027 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. From | |
CVE-2026-71852 |
medium | 4.8 | 0.0013 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF ca | |
CVE-2026-66151 |
medium | 5.5 | 0.0016 | 2026-10-29 | SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bou | |
CVE-2026-71870 |
medium | 4.8 | 0.0013 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF ca | |
CVE-2026-59717 |
medium | 4.3 | 0.0038 | 2026-10-29 | Home Assistant is open source home automation software focused on local control and privac | |
CVE-2026-69207 |
medium | 5.3 | 0.0061 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. Prio | |
CVE-2026-71381 |
medium | 4.0 | 0.0027 | 2026-10-29 | Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorizat | |
CVE-2026-9030 |
medium | 6.8 | 0.0020 | 2026-10-29 | A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynch | |
CVE-2026-9031 |
medium | 6.8 | 0.0026 | 2026-10-29 | An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient | |
CVE-2026-11743 |
medium | 6.6 | 0.0015 | 2026-10-29 | The SF32LB MPI QSPI NOR flash driver (drivers/flash/flash_sf32lb_mpi_qspi_nor.c) validated | |
CVE-2026-48047 |
medium | 5.9 | 0.0065 | 2026-10-29 | XWiki Platform WebJars API is a package for XWiki, a generic wiki platform. Starting with | |
CVE-2026-48122 |
medium | 5.4 | 0.0018 | 2026-10-29 | Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace- | |
CVE-2026-49343 |
medium | 5.9 | 0.0041 | 2026-10-29 | Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to | |
CVE-2026-19263 |
medium | 6.9 | 0.0164 | 2026-10-29 | A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8a | |
CVE-2026-19266 |
medium | 5.1 | 0.0391 | 2026-10-29 | A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the fu | |
CVE-2026-67620 |
medium | 6.3 | 0.0046 | 2026-10-29 | Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF gua | |
CVE-2026-71502 |
medium | 5.1 | 0.0074 | 2026-10-29 | CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient | |
CVE-2026-65065 |
medium | 5.5 | 0.0015 | 2026-10-29 | Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap bac | |
CVE-2026-65069 |
medium | 4.0 | 0.0017 | 2026-10-29 | Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backi | |
CVE-2026-12139 |
medium | 5.5 | 0.0016 | 2026-10-29 | Tanium addressed an information disclosure vulnerability in Connect. | |
CVE-2026-16318 |
medium | 6.9 | 0.0053 | 2026-10-29 | The QUIC transport parameters extension handler in s2n-tls incorrectly uses s2n_alloc inst | |
CVE-2026-45382 |
medium | 6.9 | 0.0043 | 2026-10-29 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.1 | |
CVE-2026-45383 |
medium | 6.9 | 0.0043 | 2026-10-29 | libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0. | |
CVE-2026-47143 |
medium | 5.9 | 0.0047 | 2026-10-29 | Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL | |
CVE-2026-47714 |
medium | 6.1 | 0.0015 | 2026-10-29 | libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, | |
CVE-2026-63092 |
medium | 5.3 | 0.0028 | 2026-10-29 | kirby-modules through 5.5.7, fixed in commit 315417e, contains an information disclosure v | |
CVE-2026-63136 |
medium | 6.5 | 0.0042 | 2026-10-29 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service | |
CVE-2026-63139 |
medium | 6.5 | 0.0047 | 2026-10-29 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Ex | |
CVE-2026-63140 |
medium | 6.5 | 0.0042 | 2026-10-29 | Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Dat | |
CVE-2026-64821 |
medium | 5.3 | 0.0022 | 2026-10-29 | djangoSIGE through 1.10 (commit a6fe7e8) contains a cross-site request forgery vulnerabili | |
CVE-2026-64822 |
medium | 6.9 | 0.0042 | 2026-10-29 | djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in Forg | |
CVE-2026-65055 |
medium | 6.9 | 0.0033 | 2026-10-29 | Taiga 6.10.1 contains a missing authorization vulnerability that allows unauthenticated at | |
CVE-2026-10674 |
medium | 5.5 | 0.0014 | 2026-10-29 | The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUN | |
CVE-2026-10675 |
medium | 6.5 | 0.0039 | 2026-10-29 | In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), pr | |
CVE-2026-10677 |
medium | 6.5 | 0.0014 | 2026-10-29 | The CONFIG_USERSPACE syscall verifier z_vrfy_k_poll() in kernel/poll.c allocates a kernel- | |
CVE-2026-10679 |
medium | 5.5 | 0.0014 | 2026-10-29 | The DesignWare SPI driver (drivers/spi/spi_dw.c) computed the SPI BAUDR clock divider as i | |
CVE-2026-16484 |
medium | 5.5 | 0.0043 | 2026-10-29 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by | |
CVE-2026-21954 |
medium | 4.3 | 0.0027 | 2026-10-29 | Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applic | |
CVE-2026-34316 |
medium | 6.1 | 0.0024 | 2026-10-29 | Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: | |
CVE-2026-46948 |
medium | 4.6 | 0.0021 | 2026-10-29 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilitie | |
CVE-2026-46968 |
medium | 5.9 | 0.0029 | 2026-10-29 | Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected a | |
CVE-2026-46975 |
medium | 5.8 | 0.0030 | 2026-10-29 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that a | |
CVE-2026-46980 |
medium | 4.3 | 0.0027 | 2026-10-29 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilitie | |
CVE-2026-46984 |
medium | 5.3 | 0.0032 | 2026-10-29 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise | |
CVE-2026-46985 |
medium | 5.3 | 0.0032 | 2026-10-29 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise | |
CVE-2026-46986 |
medium | 5.3 | 0.0032 | 2026-10-29 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise | |
CVE-2026-46991 |
medium | 4.4 | 0.0014 | 2026-10-29 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise | |
CVE-2026-46997 |
medium | 6.5 | 0.0030 | 2026-10-29 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise |