Browse All CVEs
10,454 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-59996 |
medium | 5.4 | 0.0025 | 2026-10-29 | scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directo | |
CVE-2026-59997 |
medium | 5.4 | 0.0018 | 2026-10-29 | internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line argu | |
CVE-2026-59998 |
medium | 6.5 | 0.0018 | 2026-10-29 | sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAc | |
CVE-2026-60001 |
medium | 6.5 | 0.0029 | 2026-10-29 | sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. | |
CVE-2026-6280 |
medium | 6.5 | 0.0038 | 2026-10-29 | Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT I | |
CVE-2026-6371 |
medium | 4.8 | 0.0023 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-8310 |
medium | 6.1 | 0.0025 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-8315 |
medium | 5.4 | 0.0023 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-15033 |
medium | 5.3 | 0.0182 | 2026-10-29 | A flaw has been found in christopherthielen check-peer-dependencies up to 4.3.4. Affected | |
CVE-2026-56217 |
medium | 5.3 | 0.0026 | 2026-10-29 | Capgo before 12.128.2 contains a policy bypass vulnerability in app_versions update enforc | |
CVE-2026-56283 |
medium | 4.8 | 0.0017 | 2026-10-29 | Capgo before 12.128.2 contains an html injection vulnerability in the organization setting | |
CVE-2026-56284 |
medium | 6.9 | 0.0028 | 2026-10-29 | Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in t | |
CVE-2026-56298 |
medium | 5.3 | 0.0031 | 2026-10-29 | Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app inform | |
CVE-2026-56360 |
medium | 6.3 | 0.0031 | 2026-10-29 | n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk w | |
CVE-2026-56374 |
medium | 4.8 | 0.0022 | 2026-10-29 | ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT enco | |
CVE-2026-56778 |
medium | 5.3 | 0.0029 | 2026-10-29 | n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public | |
CVE-2026-59257 |
medium | 5.3 | 0.0057 | 2026-10-29 | n8n before 1.123.61, 2.x before 2.27.4, and 2.28.x before 2.28.1 contains a SQL injection | |
CVE-2026-11903 |
medium | 5.4 | 0.0041 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-15044 |
medium | 6.3 | 0.0021 | 2026-10-29 | A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or N | |
CVE-2026-15063 |
medium | 6.3 | 0.0028 | 2026-10-29 | A flaw was found in the gorch service template, which is part of the trustyai-service-oper | |
CVE-2026-57439 |
medium | 5.0 | 0.0014 | 2026-10-29 | CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to | |
CVE-2026-59875 |
medium | 5.3 | 0.0035 | 2026-10-29 | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.17, node-tar does | |
CVE-2026-59876 |
medium | 4.8 | 0.0035 | 2026-10-29 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 until | |
CVE-2026-42505 |
medium | 5.3 | 0.0038 | 2026-10-29 | Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network o | |
CVE-2026-59882 |
medium | 6.5 | 0.0032 | 2026-10-29 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.3, Ur | |
CVE-2026-59890 |
medium | 6.1 | 0.0040 | 2026-10-29 | setuptools is a package that allows users to download, build, install, upgrade, and uninst | |
CVE-2026-59895 |
medium | 6.1 | 0.0033 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. From | |
CVE-2026-59896 |
medium | 6.5 | 0.0030 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. From | |
CVE-2026-59897 |
medium | 5.3 | 0.0018 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. From | |
CVE-2026-59923 |
medium | 6.1 | 0.0035 | 2026-10-29 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRender | |
CVE-2026-59924 |
medium | 5.9 | 0.0046 | 2026-10-29 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Include.pa | |
CVE-2026-59926 |
medium | 5.3 | 0.0033 | 2026-10-29 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, render_adm | |
CVE-2026-59927 |
medium | 5.3 | 0.0053 | 2026-10-29 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the Includ | |
CVE-2026-59929 |
medium | 6.1 | 0.0034 | 2026-10-29 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the safe_u | |
CVE-2026-59930 |
medium | 4.3 | 0.0019 | 2026-10-29 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the toc pl | |
CVE-2026-14362 |
medium | 4.9 | 0.0025 | 2026-10-29 | HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in it | |
CVE-2026-59937 |
medium | 6.9 | 0.0062 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can | |
CVE-2026-59938 |
medium | 6.9 | 0.0052 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can | |
CVE-2026-14361 |
medium | 4.7 | 0.0013 | 2026-10-29 | The consul-template library before version 0.42.1 is vulnerable to a path redirection issu | |
CVE-2026-15154 |
medium | 6.5 | 0.0048 | 2026-10-29 | A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vuln | |
CVE-2026-36027 |
medium | 6.8 | 0.0028 | 2026-10-29 | An issue in Code27 Companion Hub SQ3A.220705.003.A1 allows a physically proximate attacker | |
CVE-2026-44332 |
medium | 5.3 | 0.0052 | 2026-10-29 | Fiber is an Express inspired web framework written in Go. Prior to 3.3.0, the default Auth | |
CVE-2026-45045 |
medium | 5.3 | 0.0046 | 2026-10-29 | Fiber is an Express inspired web framework written in Go. Prior to 3.3.0 and 2.52.14, the | |
CVE-2026-53624 |
medium | 4.8 | 0.0021 | 2026-10-29 | Fiber is an Express inspired web framework written in Go. Prior to 3.4.0, the helmet middl | |
CVE-2026-58209 |
medium | 4.3 | 0.0034 | 2026-10-29 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging | |
CVE-2026-58214 |
medium | 4.3 | 0.0035 | 2026-10-29 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging | |
CVE-2026-58251 |
medium | 6.5 | 0.0046 | 2026-10-29 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging | |
CVE-2026-58252 |
medium | 6.5 | 0.0046 | 2026-10-29 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging | |
CVE-2026-58254 |
medium | 5.3 | 0.0031 | 2026-10-29 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging | |
CVE-2026-58501 |
medium | 5.9 | 0.0041 | 2026-10-29 | Zeep is a Python SOAP client. From 4.0.0 before 4.3.3, Settings.forbid_external is defined |