Browse All CVEs
13,614 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-66839 |
high | 8.4 | 0.0020 | 2026-10-29 | NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Sea | |
CVE-2026-67465 |
high | 7.5 | 0.0077 | 2026-10-29 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resou | |
CVE-2026-67551 |
high | 7.5 | 0.0077 | 2026-10-29 | pre-authentication attacker could leverage type size/count handling to cause excessive all | |
CVE-2026-67588 |
high | 7.5 | 0.0077 | 2026-10-29 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resou | |
CVE-2026-67589 |
high | 7.5 | 0.0077 | 2026-10-29 | A pre-authentication attacker could leverage type size/count handling to cause excessive a | |
CVE-2026-68060 |
high | 7.5 | 0.0077 | 2026-10-29 | A pre-authentication attacker could leverage type size/count handling to cause excessive a | |
CVE-2026-68074 |
high | 7.5 | 0.0077 | 2026-10-29 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resou | |
CVE-2026-71190 |
high | 8.7 | 0.0084 | 2026-10-29 | In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regula | |
CVE-2026-66274 |
high | 7.5 | 0.0077 | 2026-10-29 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError po | |
CVE-2026-67552 |
high | 7.5 | 0.0077 | 2026-10-29 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError po | |
CVE-2026-67590 |
high | 7.5 | 0.0077 | 2026-10-29 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError po | |
CVE-2026-67592 |
high | 7.5 | 0.0074 | 2026-10-29 | It was not possible to govern the maximum number of transfer frames per incoming delivery, | |
CVE-2026-68073 |
high | 7.5 | 0.0077 | 2026-10-29 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError po | |
CVE-2026-70374 |
high | 8.8 | 0.0187 | 2026-10-29 | HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the | |
CVE-2026-70375 |
high | 8.8 | 0.0187 | 2026-10-29 | HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the | |
CVE-2026-54416 |
high | 7.2 | 0.0050 | 2026-10-29 | Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management fea | |
CVE-2026-55739 |
high | 8.3 | 0.0037 | 2026-10-29 | Crater isolates data per company_id, and its Invoice/Estimate/Payment/Expense policies enf | |
CVE-2026-59675 |
high | 7.5 | 0.0056 | 2026-10-29 | When API audit logging is enabled, the middleware reads the entire HTTP request body into | |
CVE-2026-61483 |
high | 7.5 | 0.0103 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. Th | |
CVE-2026-70377 |
high | 7.5 | 0.0039 | 2026-10-29 | imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes output width/hei | |
CVE-2026-70378 |
high | 7.5 | 0.0033 | 2026-10-29 | imagecli's pipeline operation (Carve::apply in src/image_ops.rs) only asserts , never vali | |
CVE-2026-71202 |
high | 7.5 | 0.0046 | 2026-10-29 | The raster Rust crate's crop function (src/editor.rs) clamps the crop width/height against | |
CVE-2026-71206 |
high | 8.3 | 0.0037 | 2026-10-29 | Shiori's CheckToken function (internal/domains/auth.go) validates only the JWT's HMAC sign | |
CVE-2026-71209 |
high | 7.5 | 0.0225 | 2026-10-29 | audiobookshelf's authentication-exemption check (server/routers/Auth.js) matches unauthent | |
CVE-2026-25703 |
high | 7.3 | 0.0080 | 2026-10-29 | NeuVector through 5.4.9 is can potentially leak information from manager /network/graph AP | |
CVE-2026-12609 |
high | 7.5 | 0.0164 | 2026-10-29 | In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` ba | |
CVE-2026-60009 |
high | 8.8 | 0.0044 | 2026-10-29 | In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend bind | |
CVE-2026-71232 |
high | 7.2 | 0.0054 | 2026-10-29 | MacCMS10's admin template editor (application/admin/controller/Template.php) blocks danger | |
CVE-2026-71234 |
high | 7.5 | 0.0039 | 2026-10-29 | Documize Community's attachment download route (domain/attachment/endpoint.go, Download fu | |
CVE-2026-71235 |
high | 8.8 | 0.0052 | 2026-10-29 | Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or L | |
CVE-2026-71239 |
high | 8.1 | 0.0039 | 2026-10-29 | DjangoCRM's massmail module renders user-controlled EmlMessage fields (subject, content) t | |
CVE-2026-71241 |
high | 7.5 | 0.0049 | 2026-10-29 | Book-Management-System's Flask API endpoints /student, /record, /books, /find_stu_book, an | |
CVE-2026-71242 |
high | 8.3 | 0.0037 | 2026-10-29 | Crater's NotePolicy checks only a blanket Bouncer ability (manage-all-notes / view-all-not | |
CVE-2026-71243 |
high | 8.8 | 0.0052 | 2026-10-29 | The backmeup npm package assembles shell command strings by directly concatenating its opt | |
CVE-2026-71252 |
high | 8.2 | 0.0051 | 2026-10-29 | toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admi | |
CVE-2026-46581 |
high | 7.5 | 0.0056 | 2026-10-29 | In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does | |
CVE-2026-61891 |
high | 7.5 | 0.0053 | 2026-10-29 | In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend expo | |
CVE-2026-71255 |
high | 8.6 | 0.0039 | 2026-10-29 | nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_ | |
CVE-2026-16022 |
high | 7.8 | 0.0082 | 2026-10-29 | @oblique/cli 15.4.0 contains an OS command injection vulnerability in the project creation | |
CVE-2026-71226 |
high | 7.3 | 0.0014 | 2026-10-29 | Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can r | |
CVE-2026-71261 |
high | 7.8 | 0.0017 | 2026-10-29 | dr_libs dr_wav.h (all versions through current master) contains an integer overflow in W64 | |
CVE-2026-71264 |
high | 8.2 | 0.0033 | 2026-10-29 | WLED's GET /json/cfg endpoint (registered in wled00/wled_server.cpp) calls serveJson with | |
CVE-2026-71266 |
high | 7.8 | 0.0017 | 2026-10-29 | tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of | |
CVE-2026-71270 |
high | 8.6 | 0.0043 | 2026-10-29 | Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not up | |
CVE-2026-71271 |
high | 8.5 | 0.0033 | 2026-10-29 | Memos' webhook URL validation, isReservedIP (internal/webhook/validate.go), checks a candi | |
CVE-2026-71272 |
high | 8.5 | 0.0026 | 2026-10-29 | Memos' webhook dispatch function safeDialContext (internal/webhook/webhook.go) resolves th | |
CVE-2026-71274 |
high | 8.5 | 0.0028 | 2026-10-29 | OpenBK7231T's CHANNEL_SetLabel (src/cmnds/cmd_channels.c) stores channel labels received v | |
CVE-2026-71276 |
high | 7.1 | 0.0032 | 2026-10-29 | Magistrala (formerly Mainflux)'s message-readers API reads a value from the HTTP query str | |
CVE-2026-71279 |
high | 8.0 | 0.0057 | 2026-10-29 | Zigbee2MQTT's ExternalJSExtension.getFilePath (lib/extension/externalJS.ts) joins a parame | |
CVE-2026-71280 |
high | 8.5 | 0.0030 | 2026-10-29 | go-shiori's DownloadBookmark (internal/core/download.go) fetches a caller-supplied bookmar |