Browse All CVEs
10,499 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-62361 |
medium | 5.5 | 0.0030 | 2026-10-29 | listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to 6.2.0 | |
CVE-2026-50182 |
medium | 6.1 | 0.0022 | 2026-10-29 | WWBN AVideo is an open source video platform. Versions prior to 29.0 contain an unauthenti | |
CVE-2026-50183 |
medium | 4.7 | 0.0020 | 2026-10-29 | WWBN AVideo is an open source video platform. Versions 29.0 and below contain a stored Cro | |
CVE-2026-62314 |
medium | 5.8 | 0.0034 | 2026-10-29 | Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect | |
CVE-2026-15907 |
medium | 5.5 | 0.0041 | 2026-10-29 | A flaw has been found in H3C SecPath F1000-C8300 up to 20260522. This impacts an unknown f | |
CVE-2026-15909 |
medium | 5.3 | 0.0037 | 2026-10-29 | A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e | |
CVE-2026-35146 |
medium | 6.3 | 0.0019 | 2026-10-29 | HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application p | |
CVE-2026-35148 |
medium | 6.3 | 0.0030 | 2026-10-29 | HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability st | |
CVE-2026-59249 |
medium | 6.3 | 0.0052 | 2026-10-29 | Inconsistent interpretation of HTTP requests (HTTP response smuggling) vulnerability in el | |
CVE-2024-58360 |
medium | 6.9 | 0.0045 | 2026-10-29 | stoatchat versions before 0.7.8 fail to enforce account creation restrictions including in | |
CVE-2026-35141 |
medium | 5.3 | 0.0033 | 2026-10-29 | HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. The application allow | |
CVE-2026-35143 |
medium | 6.5 | 0.0016 | 2026-10-29 | HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability. The applicatio | |
CVE-2026-56456 |
medium | 5.3 | 0.0040 | 2026-10-29 | HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. The applic | |
CVE-2026-59237 |
medium | 6.9 | 0.0064 | 2026-10-29 | Authorization Bypass Through User-Controlled Key (CWE-639) in the Order and OrderItem REST | |
CVE-2026-12379 |
medium | 6.8 | 0.0021 | 2026-10-29 | An Open Redirect vulnerability (CWE-601) exists in the OAuth/OIDC authentication implement | |
CVE-2026-54568 |
medium | 4.3 | 0.0059 | 2026-10-29 | Microsoft UFO open-source framework for intelligent automation across devices and platform | |
CVE-2026-55440 |
medium | 6.5 | 0.0072 | 2026-10-29 | Microsoft UFO open-source framework for intelligent automation across devices and platform | |
CVE-2026-57205 |
medium | 4.3 | 0.0091 | 2026-10-29 | SimpleChat is a secure AI conversation application with personal and group workspaces for | |
CVE-2026-63081 |
medium | 5.1 | 0.0017 | 2026-10-29 | Perfect Support Ticketing & Document Management System through 1.7 contains a stored cross | |
CVE-2026-63082 |
medium | 5.3 | 0.0026 | 2026-10-29 | Perfect Support Ticketing & Document Management System through 1.7 contains a broken acces | |
CVE-2026-45612 |
medium | 5.5 | 0.0017 | 2026-10-29 | rz-libdemangle is a Rizin library for demangling symbols. Prior to 6bf56d3, the Rust deman | |
CVE-2026-45795 |
medium | 5.3 | 0.0019 | 2026-10-29 | The Janssen Project is an open-source identity and access management (IAM) platform. Prior | |
CVE-2026-47729 |
medium | 6.5 | 0.0150 | 2026-10-29 | Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of synta | |
CVE-2026-47751 |
medium | 5.3 | 0.0077 | 2026-10-29 | Claude Code Action is a general-purpose GitHub action that runs Claude Code on GitHub pull | |
CVE-2026-50012 |
medium | 5.5 | 0.0136 | 2026-10-29 | Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bu | |
CVE-2026-55406 |
medium | 5.9 | 0.0019 | 2026-10-29 | Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions su | |
CVE-2026-55407 |
medium | 6.3 | 0.0076 | 2026-10-29 | Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions su | |
CVE-2026-63086 |
medium | 6.9 | 0.0043 | 2026-10-29 | text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vuln | |
CVE-2026-6511 |
medium | 6.8 | 0.0013 | 2026-10-29 | During an internal security assessment, a potential improper access control vulnerability | |
CVE-2026-15737 |
medium | 5.7 | 0.0038 | 2026-10-29 | AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client too | |
CVE-2026-44968 |
medium | 6.3 | 0.0021 | 2026-10-29 | dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, _run | |
CVE-2026-44970 |
medium | 4.3 | 0.0037 | 2026-10-29 | dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, Defa | |
CVE-2026-46341 |
medium | 6.1 | 0.0023 | 2026-10-29 | The Apify MCP server enables AI agents to extract data from websites using ready-made scra | |
CVE-2026-46338 |
medium | 4.3 | 0.0040 | 2026-10-29 | PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 1 | |
CVE-2026-46377 |
medium | 6.2 | 0.0019 | 2026-10-29 | Dasel is a command-line tool and library for querying, modifying, and transforming data st | |
CVE-2026-46378 |
medium | 6.2 | 0.0016 | 2026-10-29 | Dasel is a command-line tool and library for querying, modifying, and transforming data st | |
CVE-2026-46514 |
medium | 6.5 | 0.0045 | 2026-10-29 | Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_reset_p | |
CVE-2026-47082 |
medium | 5.4 | 0.0030 | 2026-10-29 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The vacation "fcc" fe | |
CVE-2026-47083 |
medium | 4.3 | 0.0031 | 2026-10-29 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an ESEARCH c | |
CVE-2026-47084 |
medium | 6.5 | 0.0035 | 2026-10-29 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The LOCALDELETE comma | |
CVE-2026-47085 |
medium | 4.0 | 0.0030 | 2026-10-29 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH token forgery | |
CVE-2026-47089 |
medium | 4.3 | 0.0028 | 2026-10-29 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not lim | |
CVE-2026-54728 |
medium | 6.1 | 0.0038 | 2026-10-29 | bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). Prior to B | |
CVE-2026-60140 |
medium | 6.9 | 0.0015 | 2026-10-29 | An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to | |
CVE-2026-61718 |
medium | 5.4 | 0.0043 | 2026-10-29 | bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). From 1.6.2 | |
CVE-2024-32385 |
medium | 4.3 | 0.0031 | 2026-10-29 | An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remo | |
CVE-2024-32387 |
medium | 5.7 | 0.0030 | 2026-10-29 | An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remo | |
CVE-2026-33731 |
medium | 6.5 | 0.0016 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions prior to 29.0, the Authorize.Net | |
CVE-2026-57896 |
medium | 6.9 | 0.0015 | 2026-10-29 | An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to | |
CVE-2026-60073 |
medium | 5.2 | 0.0024 | 2026-10-29 | An out-of-bounds read in the Productivity Suite allows a physical attacker to control the |