Browse All CVEs
10,485 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-16331 |
medium | 5.5 | 0.0157 | 2026-10-29 | A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknow | |
CVE-2026-16332 |
medium | 5.5 | 0.0145 | 2026-10-29 | A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of | |
CVE-2026-16336 |
medium | 5.3 | 0.0045 | 2026-10-29 | A vulnerability was found in trinodb trino 481. Affected is an unknown function of the fil | |
CVE-2026-3182 |
medium | 4.3 | 0.0065 | 2026-10-29 | Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleart | |
CVE-2026-8593 |
medium | 5.3 | 0.0035 | 2026-10-29 | Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4 | |
CVE-2026-64627 |
medium | 6.9 | 0.0047 | 2026-10-29 | Parse Server versions >= 9.0.0 before 9.10.0-alpha.4 and versions before 8.6.85 contain a | |
CVE-2026-64628 |
medium | 5.1 | 0.0018 | 2026-10-29 | Grav contains a stored cross-site scripting vulnerability in shortcode-core attribute hand | |
CVE-2026-16397 |
medium | 6.5 | 0.0030 | 2026-10-29 | Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerabili | |
CVE-2026-16403 |
medium | 6.5 | 0.0035 | 2026-10-29 | Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 a | |
CVE-2026-6792 |
medium | 6.5 | 0.0034 | 2026-10-29 | Missing Authorization vulnerability in Universal Software Inc. FlexCity allows Exploiting | |
CVE-2026-8284 |
medium | 6.1 | 0.0024 | 2026-10-29 | URL redirection to untrusted site ('open redirect') vulnerability in Universal Software In | |
CVE-2026-8285 |
medium | 4.3 | 0.0041 | 2026-10-29 | Improper restriction of excessive authentication attempts vulnerability in Universal Softw | |
CVE-2026-16447 |
medium | 5.5 | 0.0157 | 2026-10-29 | A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of | |
CVE-2026-47121 |
medium | 6.1 | 0.0034 | 2026-10-29 | Sparkle is a software update framework for macOS. Prior to version 2.9.2, `Autoupdate/SUBi | |
CVE-2026-11876 |
medium | 5.0 | 0.0023 | 2026-10-29 | In zenml-io/zenml version 0.94.2, the `GET /api/v1/stack-deployment/stack` endpoint (`get_ | |
CVE-2026-47122 |
medium | 4.2 | 0.0010 | 2026-10-29 | Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, ` | |
CVE-2026-56584 |
medium | 5.3 | 0.0029 | 2026-10-29 | HCL IEM was affected with the Information disclosure nginx server. It may enable attackers | |
CVE-2026-65051 |
medium | 6.9 | 0.0049 | 2026-10-29 | Ninja Forms WordPress plugin version 3.14.8 contains a client-side enforcement of server-s | |
CVE-2026-28315 |
medium | 6.2 | 0.0052 | 2026-10-29 | SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability | |
CVE-2026-56585 |
medium | 4.3 | 0.0025 | 2026-10-29 | HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allo | |
CVE-2026-56586 |
medium | 4.2 | 0.0020 | 2026-10-29 | HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers t | |
CVE-2026-15789 |
medium | 6.9 | 0.0031 | 2026-10-29 | A custom client can produce such an upload request to the BuildKit daemon that files can e | |
CVE-2026-15792 |
medium | 6.0 | 0.0024 | 2026-10-29 | A malicious BuildKit client or frontend could craft a request that could lead to BuildKit | |
CVE-2026-16454 |
medium | 4.3 | 0.0036 | 2026-10-29 | In Eclipse hawkBit versions 1.0.3 and prior, a privilege escalation vulnerability (CWE-284 | |
CVE-2026-24232 |
medium | 4.3 | 0.0038 | 2026-10-29 | NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper des | |
CVE-2026-47408 |
medium | 6.5 | 0.0029 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-16243 |
medium | 5.7 | 0.0052 | 2026-10-29 | In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not | |
CVE-2026-16439 |
medium | 5.8 | 0.0043 | 2026-10-29 | In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to | |
CVE-2026-47411 |
medium | 6.5 | 0.0034 | 2026-10-29 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versi | |
CVE-2026-56577 |
medium | 6.5 | 0.0028 | 2026-10-29 | HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account co | |
CVE-2026-12548 |
medium | 4.2 | 0.0025 | 2026-10-29 | A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, | |
CVE-2026-16441 |
medium | 6.9 | 0.0053 | 2026-10-29 | In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concr | |
CVE-2026-42397 |
medium | 6.5 | 0.0042 | 2026-10-29 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a den | |
CVE-2026-46403 |
medium | 6.3 | 0.0048 | 2026-10-29 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM | |
CVE-2026-47671 |
medium | 5.4 | 0.0035 | 2026-10-29 | Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior | |
CVE-2026-49092 |
medium | 4.3 | 0.0028 | 2026-10-29 | Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana can lead to unaut | |
CVE-2026-56144 |
medium | 6.5 | 0.0032 | 2026-10-29 | Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with li | |
CVE-2026-56145 |
medium | 6.5 | 0.0047 | 2026-10-29 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service | |
CVE-2026-56146 |
medium | 5.4 | 0.0024 | 2026-10-29 | Improper Access Control (CWE-284) in Kibana can lead to unauthorized modification of Entit | |
CVE-2026-59143 |
medium | 6.3 | 0.0029 | 2026-10-29 | Data::RoaringBitmap::Shared versions before 0.02 for Perl allow an out-of-bounds read via | |
CVE-2026-64613 |
medium | 6.2 | 0.0018 | 2026-10-29 | Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing fi | |
CVE-2026-55686 |
medium | 5.3 | 0.0040 | 2026-10-29 | Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a m | |
CVE-2026-56823 |
medium | 5.4 | 0.0025 | 2026-10-29 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous | |
CVE-2026-47207 |
medium | 6.5 | 0.0044 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-47692 |
medium | 4.3 | 0.0022 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-47775 |
medium | 6.8 | 0.0022 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Pri | |
CVE-2026-47778 |
medium | 4.4 | 0.0021 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Pri | |
CVE-2026-54557 |
medium | 5.5 | 0.0018 | 2026-10-29 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.1, the mis | |
CVE-2026-55448 |
medium | 6.3 | 0.0020 | 2026-10-29 | mise manages dev tools like node, python, cmake, and terraform. From 2026.3.15 until 2026. | |
CVE-2026-47205 |
medium | 5.9 | 0.0039 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro |