Browse All CVEs
10,484 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-54753 |
medium | 5.9 | 0.0144 | 2026-10-29 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 17.0.4 until 22.7.2 | |
CVE-2026-29509 |
medium | 5.3 | 0.0037 | 2026-10-29 | Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function | |
CVE-2026-44696 |
medium | 5.7 | 0.0025 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.4.0, OpenPr | |
CVE-2026-44731 |
medium | 4.3 | 0.0029 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17. | |
CVE-2026-44732 |
medium | 4.3 | 0.0028 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17. | |
CVE-2026-44733 |
medium | 5.9 | 0.0028 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17. | |
CVE-2026-44734 |
medium | 6.5 | 0.0033 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17. | |
CVE-2026-44735 |
medium | 6.5 | 0.0037 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17. | |
CVE-2026-44736 |
medium | 6.5 | 0.0036 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.4.0, the GE | |
CVE-2026-49355 |
medium | 4.3 | 0.0029 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.4.0, `GET / | |
CVE-2026-52779 |
medium | 5.4 | 0.0022 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17. | |
CVE-2026-52781 |
medium | 6.4 | 0.0025 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17. | |
CVE-2026-53577 |
medium | 6.5 | 0.0044 | 2026-10-29 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, | |
CVE-2026-12471 |
medium | 4.3 | 0.0034 | 2026-10-29 | The Spexo theme for WordPress is vulnerable to unauthorized access due to a missing capabi | |
CVE-2026-58055 |
medium | 6.3 | 0.0025 | 2026-10-29 | nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carr | |
CVE-2026-58058 |
medium | 6.9 | 0.0145 | 2026-10-29 | Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet | |
CVE-2026-10593 |
medium | 6.5 | 0.0030 | 2026-10-29 | The Zephyr Bluetooth LE Audio Basic Audio Profile (BAP) unicast client mishandles peer-sup | |
CVE-2026-13485 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This af | |
CVE-2026-13486 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.p | |
CVE-2026-13487 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Af | |
CVE-2026-13488 |
medium | 5.5 | 0.0043 | 2026-10-29 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1. | |
CVE-2026-13490 |
medium | 6.3 | 0.0046 | 2026-10-29 | A security vulnerability has been detected in glpi-project glpi 11.0.5/11.0.6/11.0.7. This | |
CVE-2026-13498 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was identified in yashpokharna2555 restaurent-management-system. This affe | |
CVE-2026-13500 |
medium | 5.5 | 0.0052 | 2026-10-29 | A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown functi | |
CVE-2026-13503 |
medium | 5.5 | 0.0077 | 2026-10-29 | A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the f | |
CVE-2026-13521 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0/5.p | |
CVE-2026-13526 |
medium | 5.5 | 0.0043 | 2026-10-29 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is | |
CVE-2026-13527 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Th | |
CVE-2026-13533 |
medium | 5.5 | 0.0048 | 2026-10-29 | A security vulnerability has been detected in agentejo Cockpit CMS up to 0.12.2. Affected | |
CVE-2026-13546 |
medium | 5.5 | 0.0065 | 2026-10-29 | A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown cod | |
CVE-2026-13547 |
medium | 5.5 | 0.0047 | 2026-10-29 | A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This | |
CVE-2026-13550 |
medium | 5.5 | 0.0043 | 2026-10-29 | A weakness has been identified in itsourcecode Baptism Information Management System 1.0. | |
CVE-2026-13551 |
medium | 5.5 | 0.0043 | 2026-10-29 | A security vulnerability has been detected in itsourcecode Baptism Information Management | |
CVE-2026-57676 |
medium | 4.3 | 0.0029 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in Matteo Manna Simple User | |
CVE-2026-9267 |
medium | 6.9 | 0.0027 | 2026-10-29 | Eclipse tinydtls before commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221 contains an out-of | |
CVE-2026-13552 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impa | |
CVE-2026-13553 |
medium | 5.5 | 0.0050 | 2026-10-29 | A flaw has been found in itsourcecode Online Hotel Management System 1.0. Affected is an u | |
CVE-2026-13555 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in itsourcecode Online Hotel Management System 1.0. Affected by | |
CVE-2026-13559 |
medium | 5.5 | 0.0043 | 2026-10-29 | A weakness has been identified in code-projects Real State Services 1.0. Impacted is an un | |
CVE-2026-41992 |
medium | 6.9 | 0.0062 | 2026-10-29 | GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic ca | |
CVE-2026-12616 |
medium | 6.9 | 0.0054 | 2026-10-29 | The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with si | |
CVE-2026-13565 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.p | |
CVE-2026-13566 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Af | |
CVE-2026-13568 |
medium | 5.5 | 0.0047 | 2026-10-29 | A weakness has been identified in SourceCodester Inventory Management System 1.0. This vul | |
CVE-2026-56457 |
medium | 4.3 | 0.0030 | 2026-10-29 | HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vuln | |
CVE-2026-13571 |
medium | 5.5 | 0.0051 | 2026-10-29 | A flaw has been found in SourceCodester Simple Food Ordering System 1.0. The affected elem | |
CVE-2026-46406 |
medium | 4.4 | 0.0015 | 2026-10-29 | Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy c | |
CVE-2026-57326 |
medium | 6.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions. | |
CVE-2026-57328 |
medium | 6.5 | 0.0022 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions. | |
CVE-2026-57330 |
medium | 6.5 | 0.0022 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions. |