Browse All CVEs
13,900 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-75858 |
high | 8.5 | 0.0036 | 2026-10-29 | CodeWhale (packages codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain a r | |
CVE-2026-75859 |
high | 8.7 | 0.0053 | 2026-10-29 | CodeWhale versions before 0.8.64 fail to validate file paths in the project config instruc | |
CVE-2026-75911 |
high | 8.5 | 0.0025 | 2026-10-29 | CodeWhale versions before 0.8.64 fail to properly validate the allow_shell configuration p | |
CVE-2026-75912 |
high | 8.3 | 0.0045 | 2026-10-29 | CodeWhale versions before 0.8.64 contain an argument injection vulnerability in the git_bl | |
CVE-2026-75913 |
high | 8.5 | 0.0048 | 2026-10-29 | CodeWhale versions >= 0.3.27 and < 0.8.64 (published as deepseek-tui >= 0.3.27 and < 0.8.4 | |
CVE-2026-75914 |
high | 8.7 | 0.0053 | 2026-10-29 | CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analy | |
CVE-2026-75915 |
high | 8.7 | 0.0068 | 2026-10-29 | CodeWhale versions before 0.8.64 contain an environment variable exposure vulnerability in | |
CVE-2026-19869 |
high | 7.6 | 0.0049 | 2026-10-29 | @neo4j/graphql from 5.2.0 until the patched versions fails to enforce field-level @authent | |
CVE-2026-49222 |
high | 7.6 | 0.0042 | 2026-10-29 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-49223 |
high | 7.6 | 0.0042 | 2026-10-29 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-49224 |
high | 8.3 | 0.0048 | 2026-10-29 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-49225 |
high | 8.3 | 0.0048 | 2026-10-29 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-49228 |
high | 8.8 | 0.0055 | 2026-10-29 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-50577 |
high | 7.4 | 0.0051 | 2026-10-29 | ePA 3.x Integration implements the authorization workflow and writes Medical Information O | |
CVE-2026-50578 |
high | 7.5 | 0.0031 | 2026-10-29 | ePA 3.x Integration implements the authorization workflow and writes Medical Information O | |
CVE-2026-54730 |
high | 8.6 | 0.0068 | 2026-10-29 | authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, the enterpr | |
CVE-2026-61574 |
high | 8.8 | 0.0062 | 2026-10-29 | authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, the Remote | |
CVE-2026-63337 |
high | 7.5 | 0.0056 | 2026-10-29 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and | |
CVE-2026-69219 |
high | 8.7 | 0.0073 | 2026-10-29 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and | |
CVE-2026-69220 |
high | 8.7 | 0.0073 | 2026-10-29 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and | |
CVE-2026-48508 |
high | 8.8 | 0.0033 | 2026-10-29 | Lemur manages TLS certificate creation. Prior to 1.9.1, StrictRolePermission and Authority | |
CVE-2026-50143 |
high | 8.1 | 0.0049 | 2026-10-29 | The Apify MCP server enables AI agents to extract data from websites using ready-made scra | |
CVE-2026-54552 |
high | 7.9 | 0.0017 | 2026-10-29 | sh provides Python process launching. Prior to 2.2.4, the _uid option in sh.py performs an | |
CVE-2026-67920 |
high | 8.8 | 0.0094 | 2026-10-29 | An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.hal | |
CVE-2026-71880 |
high | 7.6 | 0.0048 | 2026-10-29 | Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit | |
CVE-2026-74038 |
high | 7.0 | 0.0055 | 2026-10-29 | Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthentica | |
CVE-2026-74039 |
high | 7.1 | 0.0056 | 2026-10-29 | Wazuh 4.0.0 before 4.14.7 and 5.0.0-beta2 contain a denial of service vulnerability that a | |
CVE-2026-74044 |
high | 7.0 | 0.0060 | 2026-10-29 | Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticate | |
CVE-2026-24183 |
high | 7.8 | 0.0018 | 2026-10-29 | NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an u | |
CVE-2026-24185 |
high | 7.1 | 0.0030 | 2026-10-29 | NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server | |
CVE-2026-47628 |
high | 7.5 | 0.0067 | 2026-10-29 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could | |
CVE-2026-47629 |
high | 7.5 | 0.0067 | 2026-10-29 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could | |
CVE-2026-47719 |
high | 8.2 | 0.0059 | 2026-10-29 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.2, | |
CVE-2026-52481 |
high | 7.5 | 0.0052 | 2026-10-29 | An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obta | |
CVE-2026-52736 |
high | 8.7 | 0.0061 | 2026-10-29 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a remote unauthenticated P | |
CVE-2026-52829 |
high | 7.5 | 0.0061 | 2026-10-29 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated IPv4 pe | |
CVE-2026-59915 |
high | 7.3 | 0.0014 | 2026-10-29 | Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privile | |
CVE-2026-65984 |
high | 7.5 | 0.0052 | 2026-10-29 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and ear | |
CVE-2026-70666 |
high | 7.4 | 0.0022 | 2026-10-29 | Lemur manages TLS certificate creation. Prior to 1.9.3, an authority-role member could upd | |
CVE-2026-71303 |
high | 7.7 | 0.0028 | 2026-10-29 | Lemur manages TLS certificate creation. Prior to 1.9.3, _validate_acme_url enforced ACME_D | |
CVE-2026-71307 |
high | 7.7 | 0.0031 | 2026-10-29 | Lemur manages TLS certificate creation. Prior to 1.9.3, GET /api/1/destinations and GET /a | |
CVE-2026-71308 |
high | 8.1 | 0.0032 | 2026-10-29 | Lemur manages TLS certificate creation. From 0.5.0 until 1.9.3, certificate create, upload | |
CVE-2026-71417 |
high | 7.3 | 0.0010 | 2026-10-29 | Lemur manages TLS certificate creation. Prior to 1.9.3, POST /api/1/certificates/upload al | |
CVE-2026-71675 |
high | 7.5 | 0.0055 | 2026-10-29 | An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the | |
CVE-2026-75877 |
high | 8.6 | 0.0085 | 2026-10-29 | A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the fun | |
CVE-2026-75935 |
high | 8.7 | 0.0061 | 2026-10-29 | Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1 | |
CVE-2026-75936 |
high | 8.7 | 0.0061 | 2026-10-29 | Improper handling of highly compressed data in the GZIP auto-decompression handler in Amaz | |
CVE-2026-52817 |
high | 7.0 | 0.0018 | 2026-10-29 | Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related | |
CVE-2026-53453 |
high | 8.7 | 0.0045 | 2026-10-29 | Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Pri | |
CVE-2026-53455 |
high | 8.6 | 0.0050 | 2026-10-29 | Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Pri |