Browse All CVEs
10,485 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-45712 |
medium | 5.9 | 0.0034 | 2026-10-29 | Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the scre | |
CVE-2026-46671 |
medium | 4.4 | 0.0015 | 2026-10-29 | Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prio | |
CVE-2026-48824 |
medium | 5.3 | 0.0054 | 2026-10-29 | Mailpit is an email testing tool and API for developers. Prior to version 1.30.1, the fix | |
CVE-2026-63102 |
medium | 5.3 | 0.0033 | 2026-10-29 | rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authen | |
CVE-2026-6793 |
medium | 5.4 | 0.0023 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-32819 |
medium | 4.3 | 0.0027 | 2026-10-29 | dataCycle is a data management system for centrally storing, managing, searching, finding, | |
CVE-2026-32823 |
medium | 4.3 | 0.0014 | 2026-10-29 | dataCycle is a data management system for centrally storing, managing, searching, finding, | |
CVE-2026-42218 |
medium | 5.3 | 0.0042 | 2026-10-29 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel | |
CVE-2026-44978 |
medium | 5.3 | 0.0053 | 2026-10-29 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds | |
CVE-2026-50743 |
medium | 5.4 | 0.0014 | 2026-10-29 | A CSRF vulnerability exists in the `zone-include.php` script in Revive Adserver 6.0.7. Lin | |
CVE-2026-55238 |
medium | 5.3 | 0.0052 | 2026-10-29 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability conce | |
CVE-2026-55645 |
medium | 6.5 | 0.0048 | 2026-10-29 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability conce | |
CVE-2026-58413 |
medium | 6.1 | 0.0019 | 2026-10-29 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `Env | |
CVE-2026-58414 |
medium | 5.5 | 0.0019 | 2026-10-29 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `Env | |
CVE-2026-58481 |
medium | 6.5 | 0.0019 | 2026-10-29 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `Age | |
CVE-2026-58482 |
medium | 5.9 | 0.0020 | 2026-10-29 | Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, docume | |
CVE-2026-44227 |
medium | 6.1 | 0.0026 | 2026-10-29 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 an | |
CVE-2026-44228 |
medium | 5.4 | 0.0026 | 2026-10-29 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 an | |
CVE-2026-45295 |
medium | 6.5 | 0.0024 | 2026-10-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior t | |
CVE-2026-46715 |
medium | 5.3 | 0.0035 | 2026-10-29 | Flask-Security-Too allows users to add security features to their Flask applicationa. Vers | |
CVE-2026-55639 |
medium | 5.3 | 0.0042 | 2026-10-29 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability conce | |
CVE-2026-60029 |
medium | 5.1 | 0.0042 | 2026-10-29 | Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 | |
CVE-2026-60031 |
medium | 6.9 | 0.0043 | 2026-10-29 | Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1 - | |
CVE-2026-60033 |
medium | 5.1 | 0.0039 | 2026-10-29 | Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0 - | |
CVE-2026-61901 |
medium | 6.1 | 0.0024 | 2026-10-29 | Joomla Extension - hikashop.com - Open redirect in Hikashop < 6.5.2 - The Joomla extension | |
CVE-2026-63730 |
medium | 5.3 | 0.0040 | 2026-10-29 | HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows aut | |
CVE-2026-63731 |
medium | 6.3 | 0.0030 | 2026-10-29 | HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows aut | |
CVE-2026-63768 |
medium | 5.3 | 0.0034 | 2026-10-29 | cal.diy through 6.2.0 contains an open redirect vulnerability in the conferencing OAuth ca | |
CVE-2026-63771 |
medium | 6.0 | 0.0043 | 2026-10-29 | Adminer before 5.4.3 contains a cookie injection vulnerability that allows attackers to ma | |
CVE-2026-15788 |
medium | 5.6 | 0.0041 | 2026-10-29 | BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers doe | |
CVE-2026-44229 |
medium | 5.4 | 0.0014 | 2026-10-29 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 an | |
CVE-2026-44230 |
medium | 6.1 | 0.0015 | 2026-10-29 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up | |
CVE-2026-53592 |
medium | 4.6 | 0.0014 | 2026-10-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A Proto | |
CVE-2026-53594 |
medium | 4.9 | 0.0042 | 2026-10-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeSco | |
CVE-2026-53596 |
medium | 5.3 | 0.0029 | 2026-10-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior t | |
CVE-2026-58624 |
medium | 5.4 | 0.0063 | 2026-10-29 | Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java libr | |
CVE-2026-64650 |
medium | 6.3 | 0.0017 | 2026-10-29 | The `@ai-sdk/harness-opencode` tool is an HarnessV1 adapter backed by @openai/codex-sdk, w | |
CVE-2026-64651 |
medium | 6.3 | 0.0017 | 2026-10-29 | The `@ai-sdk/harness-opencode` tool connects HarnessAgent to OpenCode through a sandboxed | |
CVE-2026-16324 |
medium | 5.5 | 0.0047 | 2026-10-29 | A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted e | |
CVE-2026-47128 |
medium | 6.1 | 0.0013 | 2026-10-29 | nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to ve | |
CVE-2026-47133 |
medium | 6.9 | 0.0015 | 2026-10-29 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access | |
CVE-2026-47134 |
medium | 6.9 | 0.0015 | 2026-10-29 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access | |
CVE-2026-47144 |
medium | 5.5 | 0.0018 | 2026-10-29 | Shamefile is a linter for undocumented linter warnings. Prior to version 0.1.7, a path tra | |
CVE-2026-51025 |
medium | 6.1 | 0.0025 | 2026-10-29 | Cross Site Scripting vulnerability in fuint Member Marketing System <=v1.0 allows a remote | |
CVE-2026-51385 |
medium | 6.9 | 0.0053 | 2026-10-29 | An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attack | |
CVE-2026-57852 |
medium | 6.3 | 0.0069 | 2026-10-29 | Grav CMS scheduler-webhook plugin contains an authentication bypass vulnerability that all | |
CVE-2026-64626 |
medium | 5.3 | 0.0023 | 2026-10-29 | AVideo versions from commit 0dbadbca through latest master contain a server-side request f | |
CVE-2026-16327 |
medium | 5.5 | 0.0157 | 2026-10-29 | A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown pr | |
CVE-2026-16329 |
medium | 5.5 | 0.0145 | 2026-10-29 | A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of | |
CVE-2026-16330 |
medium | 5.5 | 0.0157 | 2026-10-29 | A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown |