Browse All CVEs
10,485 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-27955 |
medium | 6.6 | 0.0027 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-27956 |
medium | 4.3 | 0.0029 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-44947 |
medium | 6.9 | 0.0039 | 2026-10-29 | A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Ranch | |
CVE-2026-48192 |
medium | 6.8 | 0.0032 | 2026-10-29 | A vulnerability has been identified in Mendix Studio Pro 10.11 (All versions), Mendix Stud | |
CVE-2026-13455 |
medium | 4.3 | 0.0019 | 2026-10-29 | PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to re | |
CVE-2026-44948 |
medium | 5.3 | 0.0049 | 2026-10-29 | A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0 | |
CVE-2026-48314 |
medium | 6.5 | 0.0062 | 2026-10-29 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of | |
CVE-2026-10655 |
medium | 5.9 | 0.0038 | 2026-10-29 | The asynchronous SNTP client in Zephyr (subsys/net/lib/sntp/sntp.c, sntp_close_async) clos | |
CVE-2026-58173 |
medium | 6.0 | 0.0045 | 2026-10-29 | Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers t | |
CVE-2026-58174 |
medium | 6.0 | 0.0045 | 2026-10-29 | Hermes WebUI before 0.51.521 validates the workspace of an imported session under the acti | |
CVE-2026-58369 |
medium | 6.9 | 0.0064 | 2026-10-29 | Woodpecker before 3.15.0 registers the /api/orgs/lookup/*org_full_name endpoint without au | |
CVE-2026-58373 |
medium | 5.3 | 0.0034 | 2026-10-29 | CVAT before 2.69.0 contains an improper authorization vulnerability in QualityReportViewSe | |
CVE-2026-10546 |
medium | 6.5 | 0.0025 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) vulnera | |
CVE-2026-11906 |
medium | 6.5 | 0.0042 | 2026-10-29 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (incl | |
CVE-2026-12085 |
medium | 6.5 | 0.0038 | 2026-10-29 | IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 th | |
CVE-2026-12086 |
medium | 5.5 | 0.0014 | 2026-10-29 | IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD | |
CVE-2026-9002 |
medium | 6.5 | 0.0027 | 2026-10-29 | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 could allow an adjacent attacker to ca | |
CVE-2026-10562 |
medium | 5.9 | 0.0046 | 2026-10-29 | An unauthenticated URL redirection vulnerability has been identified in Archer AX20 V2 due | |
CVE-2026-11594 |
medium | 6.1 | 0.0034 | 2026-10-29 | IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulner | |
CVE-2026-9106 |
medium | 4.8 | 0.0036 | 2026-10-29 | A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allow | |
CVE-2026-9132 |
medium | 6.0 | 0.0042 | 2026-10-29 | A missing authorization vulnerability was identified in GitHub Enterprise Server that allo | |
CVE-2026-10585 |
medium | 6.3 | 0.0032 | 2026-10-29 | A stored cross-site scripting vulnerability was identified in GitHub Enterprise Server tha | |
CVE-2026-57204 |
medium | 6.9 | 0.0037 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.13.3, a maliciously cr | |
CVE-2026-58450 |
medium | 5.3 | 0.0029 | 2026-10-29 | Invoice Ninja through 5.13.26 contains an open redirect vulnerability in the client portal | |
CVE-2026-13790 |
medium | 6.5 | 0.0032 | 2026-10-29 | Side-channel information leakage in Scroll in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-13793 |
medium | 6.5 | 0.0025 | 2026-10-29 | Insufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.47 allowed a r | |
CVE-2026-13795 |
medium | 6.5 | 0.0027 | 2026-10-29 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7 | |
CVE-2026-13808 |
medium | 4.6 | 0.0014 | 2026-10-29 | Insufficient data validation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871 | |
CVE-2026-13809 |
medium | 6.5 | 0.0029 | 2026-10-29 | Side-channel information leakage in Safe Browsing in Google Chrome on iOS prior to 150.0.7 | |
CVE-2026-13810 |
medium | 6.5 | 0.0032 | 2026-10-29 | Inappropriate implementation in Input in Google Chrome on Linux prior to 150.0.7871.47 all | |
CVE-2026-13812 |
medium | 4.7 | 0.0019 | 2026-10-29 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior | |
CVE-2026-13816 |
medium | 6.5 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in File Input in Google Chrome on Android prior | |
CVE-2026-13818 |
medium | 6.5 | 0.0029 | 2026-10-29 | Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-13820 |
medium | 6.5 | 0.0034 | 2026-10-29 | Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote | |
CVE-2026-13822 |
medium | 6.5 | 0.0018 | 2026-10-29 | Inappropriate implementation in Extensions in Google Chrome on Android prior to 150.0.7871 | |
CVE-2026-13826 |
medium | 6.5 | 0.0025 | 2026-10-29 | Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.4 | |
CVE-2026-13828 |
medium | 6.5 | 0.0028 | 2026-10-29 | Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-13833 |
medium | 6.5 | 0.0037 | 2026-10-29 | Uninitialized Use in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote | |
CVE-2026-13836 |
medium | 6.1 | 0.0022 | 2026-10-29 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remo | |
CVE-2026-13837 |
medium | 4.3 | 0.0024 | 2026-10-29 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remo | |
CVE-2026-13838 |
medium | 6.5 | 0.0024 | 2026-10-29 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remo | |
CVE-2026-13839 |
medium | 6.5 | 0.0024 | 2026-10-29 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remo | |
CVE-2026-13840 |
medium | 6.5 | 0.0025 | 2026-10-29 | Insufficient policy enforcement in Canvas in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-13842 |
medium | 4.3 | 0.0023 | 2026-10-29 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871 | |
CVE-2026-13847 |
medium | 6.5 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior | |
CVE-2026-13857 |
medium | 4.2 | 0.0021 | 2026-10-29 | Inappropriate implementation in Geometry in Google Chrome prior to 150.0.7871.47 allowed a | |
CVE-2026-13858 |
medium | 6.5 | 0.0029 | 2026-10-29 | Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote atta | |
CVE-2026-13860 |
medium | 4.2 | 0.0021 | 2026-10-29 | Incorrect security UI in Autofill in Google Chrome on Windows prior to 150.0.7871.47 allow | |
CVE-2026-13862 |
medium | 6.5 | 0.0025 | 2026-10-29 | Insufficient policy enforcement in Web Authentication (Passkeys & Security Keys) in Google | |
CVE-2026-13865 |
medium | 4.3 | 0.0024 | 2026-10-29 | Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7 |