Browse All CVEs
1,853 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-18000 |
low | 3.1 | 0.0018 | 2026-10-29 | Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 | |
CVE-2026-18011 |
low | 2.4 | 0.0013 | 2026-10-29 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922 | |
CVE-2026-41709 |
low | 2.7 | 0.0069 | 2026-10-29 | KEV | Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a mali |
CVE-2026-54522 |
low | 2.1 | 0.0023 | 2026-10-29 | MessagePack for Ruby is an implementation of the MessagePack binary serialization format. | |
CVE-2026-58039 |
low | 3.3 | 0.0015 | 2026-10-29 | A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrite | |
CVE-2026-65636 |
low | 2.1 | 0.0020 | 2026-10-29 | Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr (Elixir.Ymlr m | |
CVE-2026-67350 |
low | 2.1 | 0.0035 | 2026-10-29 | Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows u | |
CVE-2026-56567 |
low | 3.3 | 0.0014 | 2026-10-29 | HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves | |
CVE-2026-56569 |
low | 3.3 | 0.0014 | 2026-10-29 | HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the publ | |
CVE-2026-54787 |
low | 3.1 | 0.0013 | 2026-10-29 | sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstor | |
CVE-2026-18581 |
low | 1.9 | 0.0016 | 2026-10-29 | A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is so | |
CVE-2026-18590 |
low | 2.1 | 0.0182 | 2026-10-29 | A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Affected is the funct | |
CVE-2026-18591 |
low | 0.9 | 0.0011 | 2026-10-29 | A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android. Af | |
CVE-2026-18593 |
low | 2.9 | 0.0042 | 2026-10-29 | A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown p | |
CVE-2026-18604 |
low | 1.9 | 0.0014 | 2026-10-29 | A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Androi | |
CVE-2026-18631 |
low | 2.1 | 0.0040 | 2026-10-29 | A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects t | |
CVE-2026-18632 |
low | 2.1 | 0.0039 | 2026-10-29 | A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects th | |
CVE-2026-18644 |
low | 2.1 | 0.0054 | 2026-10-29 | A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected by this issue is the | |
CVE-2026-68980 |
low | 2.3 | 0.0048 | 2026-10-29 | Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated | |
CVE-2026-18645 |
low | 2.1 | 0.0054 | 2026-10-29 | A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the functio | |
CVE-2026-18648 |
low | 1.9 | 0.0021 | 2026-10-29 | A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the | |
CVE-2026-46712 |
low | 2.3 | 0.0036 | 2026-10-29 | Misskey is an open source, federated social media platform. Versions 2025.3.2 and later, b | |
CVE-2026-58044 |
low | 3.7 | 0.0027 | 2026-10-29 | A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forw | |
CVE-2026-18719 |
low | 2.1 | 0.0032 | 2026-10-29 | A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the | |
CVE-2026-18721 |
low | 2.1 | 0.0043 | 2026-10-29 | A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some | |
CVE-2026-18722 |
low | 2.1 | 0.0037 | 2026-10-29 | A vulnerability was found in diaowen DWSurvey up to 6.14.0. Impacted is the function in Dw | |
CVE-2026-18723 |
low | 2.1 | 0.0035 | 2026-10-29 | A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is a | |
CVE-2026-66884 |
low | 2.1 | 0.0026 | 2026-10-29 | Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc. | |
CVE-2026-18766 |
low | 2.1 | 0.0032 | 2026-10-29 | A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2 | |
CVE-2026-18773 |
low | 2.1 | 0.0035 | 2026-10-29 | A vulnerability was detected in NousResearch hermes-agent up to 2026.6.5. Affected by this | |
CVE-2026-18774 |
low | 2.1 | 0.0035 | 2026-10-29 | A flaw has been found in NousResearch hermes-agent up to 0.16.0. This affects the function | |
CVE-2026-18775 |
low | 2.1 | 0.0038 | 2026-10-29 | A vulnerability has been found in NousResearch hermes-agent up to 0.16.0. This vulnerabili | |
CVE-2026-18784 |
low | 1.9 | 0.0017 | 2026-10-29 | A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UA_ | |
CVE-2026-18785 |
low | 1.9 | 0.0016 | 2026-10-29 | A vulnerability was determined in o6 open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b. I | |
CVE-2026-18790 |
low | 1.9 | 0.0016 | 2026-10-29 | A weakness has been identified in Systerel S2OPC up to 1.7.3. This affects the function Lo | |
CVE-2026-66300 |
low | 2.3 | 0.0032 | 2026-10-29 | SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Rout | |
CVE-2026-16791 |
low | 1.0 | 0.0013 | 2026-10-29 | A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials | |
CVE-2026-18852 |
low | 1.9 | 0.0016 | 2026-10-29 | A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f | |
CVE-2026-18853 |
low | 1.9 | 0.0021 | 2026-10-29 | A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Andr | |
CVE-2026-18856 |
low | 2.0 | 0.0040 | 2026-10-29 | A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33. This impacts the functio | |
CVE-2026-18896 |
low | 2.1 | 0.0032 | 2026-10-29 | A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affe | |
CVE-2026-18903 |
low | 2.1 | 0.0052 | 2026-10-29 | A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7 | |
CVE-2026-8029 |
low | 3.9 | 0.0021 | 2026-10-29 | The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to ex | |
CVE-2026-17578 |
low | 2.3 | 0.0024 | 2026-10-29 | Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation befo | |
CVE-2026-12730 |
low | 3.8 | 0.0017 | 2026-10-29 | IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 | |
CVE-2026-18927 |
low | 2.1 | 0.0035 | 2026-10-29 | A vulnerability was determined in imranrisal-dev Student-Management-System 18ea7904c339e0c | |
CVE-2026-70430 |
low | 2.7 | 0.0048 | 2026-10-29 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects | |
CVE-2026-70437 |
low | 3.7 | 0.0027 | 2026-10-29 | Jenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earlier does not | |
CVE-2026-18959 |
low | 2.1 | 0.0054 | 2026-10-29 | A flaw has been found in yushine InnoShop up to 0.8.2. Affected by this issue is the funct | |
CVE-2026-18968 |
low | 2.1 | 0.0045 | 2026-10-29 | A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751 |