Browse All CVEs
10,438 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-58494 |
medium | 6.5 | 0.0017 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasm | |
CVE-2026-6896 |
medium | 5.4 | 0.0040 | 2026-10-29 | GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11 | |
CVE-2026-39178 |
medium | 6.3 | 0.0027 | 2026-10-29 | A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute | |
CVE-2026-39179 |
medium | 6.3 | 0.0027 | 2026-10-29 | A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute | |
CVE-2026-48492 |
medium | 4.9 | 0.0039 | 2026-10-29 | Snipe-IT is an IT asset/license management system. Prior to version 8.6.1, the GET /api/v1 | |
CVE-2026-55877 |
medium | 6.1 | 0.0034 | 2026-10-29 | Symfony UX is a JavaScript ecosystem for Symfony. From 2.17.0 before 2.36.1 and from 3.0.0 | |
CVE-2026-15108 |
medium | 4.3 | 0.0020 | 2026-10-29 | Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an att | |
CVE-2026-15109 |
medium | 6.5 | 0.0029 | 2026-10-29 | Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.115 allowed a remote attac | |
CVE-2026-15124 |
medium | 4.3 | 0.0027 | 2026-10-29 | Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allo | |
CVE-2026-15127 |
medium | 6.1 | 0.0022 | 2026-10-29 | Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a r | |
CVE-2026-15128 |
medium | 6.1 | 0.0022 | 2026-10-29 | Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a r | |
CVE-2026-15130 |
medium | 4.3 | 0.0027 | 2026-10-29 | Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 all | |
CVE-2026-15131 |
medium | 4.3 | 0.0027 | 2026-10-29 | Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowe | |
CVE-2026-15134 |
medium | 5.5 | 0.0032 | 2026-10-29 | A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Aff | |
CVE-2026-15135 |
medium | 5.5 | 0.0043 | 2026-10-29 | A security flaw has been discovered in code-projects Online Food Order System 1.0. This af | |
CVE-2026-15137 |
medium | 5.5 | 0.0043 | 2026-10-29 | A weakness has been identified in code-projects Interview Management System 1.0. This vuln | |
CVE-2026-47646 |
medium | 6.1 | 0.0047 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Dy | |
CVE-2026-1365 |
medium | 6.5 | 0.0046 | 2026-10-29 | Insertion of sensitive information into sent data vulnerability in Sayax Energy Technologi | |
CVE-2026-56459 |
medium | 5.5 | 0.0015 | 2026-10-29 | HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure. The ap | |
CVE-2026-56460 |
medium | 6.5 | 0.0038 | 2026-10-29 | HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to auth | |
CVE-2026-5793 |
medium | 6.1 | 0.0025 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-56288 |
medium | 4.6 | 0.0011 | 2026-10-29 | GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted | |
CVE-2026-56289 |
medium | 4.6 | 0.0011 | 2026-10-29 | GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (s | |
CVE-2026-58303 |
medium | 6.1 | 0.0016 | 2026-10-29 | Stack-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow | |
CVE-2026-58304 |
medium | 6.1 | 0.0016 | 2026-10-29 | Out-of-bounds read, Out-of-bounds write vulnerability in Samsung Open Source Escargot allo | |
CVE-2026-58305 |
medium | 6.1 | 0.0015 | 2026-10-29 | Access of resource using incompatible type ('type confusion') vulnerability in Samsung Ope | |
CVE-2026-58306 |
medium | 6.1 | 0.0016 | 2026-10-29 | Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow B | |
CVE-2026-58307 |
medium | 6.1 | 0.0015 | 2026-10-29 | Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allo | |
CVE-2026-12879 |
medium | 5.9 | 0.0030 | 2026-10-29 | An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions | |
CVE-2026-60094 |
medium | 6.9 | 0.0064 | 2026-10-29 | Vinchin Backup & Recovery through 9.0.0.86562 contains a heap buffer overflow vulnerabilit | |
CVE-2026-60095 |
medium | 6.9 | 0.0075 | 2026-10-29 | Vinchin Backup & Recovery through 9.0.0.86562 contains a stack buffer overflow vulnerabili | |
CVE-2026-54800 |
medium | 6.3 | 0.0023 | 2026-10-29 | A vulnerability has been identified in CPCI85 Central Processing/Communication (All versio | |
CVE-2026-5005 |
medium | 5.4 | 0.0023 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-15189 |
medium | 5.3 | 0.0026 | 2026-10-29 | A security vulnerability has been detected in aerostackdev aerostack-mcp up to 6315dfde7df | |
CVE-2026-15190 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. T | |
CVE-2026-15192 |
medium | 5.5 | 0.0076 | 2026-10-29 | A vulnerability has been found in mettle sendportal up to 3.0.1. This issue affects the fu | |
CVE-2026-51598 |
medium | 6.5 | 0.0032 | 2026-10-29 | An input validation vulnerability in the RTSP service of MERCURY MIPC252W IP Camera v1.0.5 | |
CVE-2026-44022 |
medium | 5.5 | 0.0021 | 2026-10-29 | Docling simplifies document processing by parsing diverse formats and providing integratio | |
CVE-2026-48789 |
medium | 4.3 | 0.0034 | 2026-10-29 | AnythingLLM is an application that turns pieces of content into context that any LLM can u | |
CVE-2026-54686 |
medium | 4.3 | 0.0040 | 2026-10-29 | Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026 | |
CVE-2026-13021 |
medium | 4.3 | 0.0020 | 2026-10-29 | Inappropriate implementation in DeviceBoundSessionCredentials in Google Chrome prior to 14 | |
CVE-2026-13022 |
medium | 6.5 | 0.0020 | 2026-10-29 | Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed | |
CVE-2026-13023 |
medium | 5.3 | 0.0029 | 2026-10-29 | Uninitialized Use in GPU in Google Chrome prior to 149.0.7827.197 allowed a remote attacke | |
CVE-2026-13024 |
medium | 4.2 | 0.0022 | 2026-10-29 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7 | |
CVE-2026-13030 |
medium | 5.3 | 0.0029 | 2026-10-29 | Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a rem | |
CVE-2026-13034 |
medium | 4.7 | 0.0020 | 2026-10-29 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed | |
CVE-2026-53944 |
medium | 5.8 | 0.0033 | 2026-10-29 | Ghost is a Node.js content management system. From 6.0.9 until 6.21.1, when making an exte | |
CVE-2026-53945 |
medium | 4.0 | 0.0021 | 2026-10-29 | Ghost is a Node.js content management system. From 6.0.9 until 6.21.1, Ghost’s private-IP | |
CVE-2026-53946 |
medium | 5.4 | 0.0021 | 2026-10-29 | Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, when re-rendering | |
CVE-2026-53947 |
medium | 5.3 | 0.0034 | 2026-10-29 | Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in r |