Browse All CVEs
10,496 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-15995 |
medium | 4.2 | 0.0017 | 2026-10-29 | IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could a | |
CVE-2026-48504 |
medium | 5.3 | 0.0042 | 2026-10-29 | OpenTelemetry Rust is the Rust OpenTelemetry implementation. In 0.32.0 and earlier, Baggag | |
CVE-2026-48819 |
medium | 4.8 | 0.0027 | 2026-10-29 | Hey API is an ecosystem for turning API specifications into production-ready code. Prior t | |
CVE-2026-50162 |
medium | 6.9 | 0.0044 | 2026-10-29 | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, resolveWritePath() in | |
CVE-2026-54463 |
medium | 6.9 | 0.0049 | 2026-10-29 | websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, draft | |
CVE-2026-54464 |
medium | 6.3 | 0.0044 | 2026-10-29 | ### Impact If this library is used in tandem with the `permessage-deflate` extension, a W | |
CVE-2026-54465 |
medium | 6.3 | 0.0049 | 2026-10-29 | websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when | |
CVE-2026-7754 |
medium | 6.5 | 0.0034 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forge | |
CVE-2026-7771 |
medium | 5.5 | 0.0015 | 2026-10-29 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when comp | |
CVE-2026-49977 |
medium | 4.3 | 0.0035 | 2026-10-29 | tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.33.0, tarteaucitr | |
CVE-2026-54163 |
medium | 4.7 | 0.0021 | 2026-10-29 | secure_headers manages application of security headers with many safe defaults. Prior to 7 | |
CVE-2026-54242 |
medium | 4.9 | 0.0023 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.24 an | |
CVE-2026-54243 |
medium | 6.1 | 0.0034 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.24 an | |
CVE-2026-54490 |
medium | 6.3 | 0.0044 | 2026-10-29 | websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if th | |
CVE-2026-54497 |
medium | 6.8 | 0.0033 | 2026-10-29 | view_component is a framework for building reusable, testable, and encapsulated view compo | |
CVE-2026-44979 |
medium | 6.3 | 0.0042 | 2026-10-29 | @hapi/wreck is an HTTP client utility. Prior to 18.1.1, when @hapi/wreck follows a 3xx red | |
CVE-2026-48022 |
medium | 6.5 | 0.0018 | 2026-10-29 | @hapi/wreck is an HTTP client utility. Prior to 18.1.2, Wreck strips credential headers in | |
CVE-2026-48049 |
medium | 5.3 | 0.0059 | 2026-10-29 | @hapi/inert provides static file and directory handlers for hapi.js. From 4.0.0 to 7.1.0, | |
CVE-2026-57980 |
medium | 5.4 | 0.0039 | 2026-10-29 | Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based | |
CVE-2026-16083 |
medium | 5.5 | 0.0072 | 2026-10-29 | A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This affects the funct | |
CVE-2026-16084 |
medium | 5.5 | 0.0056 | 2026-10-29 | A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function w | |
CVE-2024-58358 |
medium | 6.9 | 0.0047 | 2026-10-29 | SurrealDB versions before 2.1.0 contain a denial of service vulnerability in role conversi | |
CVE-2024-58363 |
medium | 5.3 | 0.0034 | 2026-10-29 | SurrealDB before 1.5.4 and 2.0.0-alpha.1 before 2.0.0-alpha.6 fails to properly validate a | |
CVE-2026-16125 |
medium | 5.5 | 0.0050 | 2026-10-29 | A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the funct | |
CVE-2026-16126 |
medium | 5.5 | 0.0051 | 2026-10-29 | A vulnerability was determined in zevorn rt-claw up to 0.2.0. The impacted element is the | |
CVE-2026-16127 |
medium | 5.5 | 0.0050 | 2026-10-29 | A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function cl | |
CVE-2026-16128 |
medium | 5.5 | 0.0050 | 2026-10-29 | A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This impacts the functi | |
CVE-2026-16150 |
medium | 5.3 | 0.0045 | 2026-10-29 | A vulnerability was found in RobinHerbots Inputmask up to 5.0.9. Affected by this issue is | |
CVE-2026-16151 |
medium | 5.3 | 0.0045 | 2026-10-29 | A vulnerability has been found in CartoDB carto-api-client 0.5.29. This impacts the functi | |
CVE-2026-57848 |
medium | 6.8 | 0.0020 | 2026-10-29 | Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component (reachab | |
CVE-2026-12228 |
medium | 5.4 | 0.0033 | 2026-10-29 | A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/prompts/share` | |
CVE-2026-16152 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. Affecte | |
CVE-2026-16154 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.p | |
CVE-2026-16200 |
medium | 5.5 | 0.0050 | 2026-10-29 | A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the function cl | |
CVE-2026-16201 |
medium | 5.5 | 0.0053 | 2026-10-29 | A vulnerability was found in zevorn rt-claw up to 0.2.0. Affected is the function claw_net | |
CVE-2026-16206 |
medium | 5.3 | 0.0037 | 2026-10-29 | A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. Thi | |
CVE-2026-16210 |
medium | 5.5 | 0.0069 | 2026-10-29 | A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the function sel | |
CVE-2026-16213 |
medium | 4.8 | 0.0011 | 2026-10-29 | A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected | |
CVE-2026-16215 |
medium | 5.5 | 0.0055 | 2026-10-29 | A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an u | |
CVE-2026-16224 |
medium | 5.3 | 0.0039 | 2026-10-29 | A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is | |
CVE-2026-16226 |
medium | 5.1 | 0.0038 | 2026-10-29 | A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affect | |
CVE-2026-16227 |
medium | 5.5 | 0.0043 | 2026-10-29 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling Sy | |
CVE-2026-16228 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affe | |
CVE-2026-63859 |
medium | 5.5 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add miss | |
CVE-2026-63861 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregi | |
CVE-2026-63862 |
medium | 5.5 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: P | |
CVE-2026-63868 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsign | |
CVE-2026-45138 |
medium | 5.4 | 0.0018 | 2026-10-29 | CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9 | |
CVE-2026-63734 |
medium | 6.9 | 0.0047 | 2026-10-29 | SurrealDB versions before 3.2.0 contain a denial of service vulnerability in the SurrealML | |
CVE-2026-57310 |
medium | 6.3 | 0.0028 | 2026-10-29 | Windu CMS uses hashing algorithm based on MD5 and SHA1 with static salt to store user pass |