Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-48240 |
high | 7.1 | 0.0022 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/statistics. | |
CVE-2026-48239 |
high | 7.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/reports.php | |
CVE-2026-48238 |
high | 7.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/mobile_main | |
CVE-2026-48237 |
high | 7.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in message.php wher | |
CVE-2026-48235 |
high | 8.8 | 0.0024 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in incs/remotes.inc | |
CVE-2026-48234 |
high | 7.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in portal/ajax/list | |
CVE-2026-48233 |
high | 7.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/sit_inciden | |
CVE-2026-48232 |
high | 7.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/fullsit_inc | |
CVE-2026-48231 |
high | 7.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in tables.php where | |
CVE-2026-48229 |
medium | 5.1 | 0.0017 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48228 |
medium | 5.1 | 0.0017 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48227 |
medium | 5.1 | 0.0017 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48226 |
medium | 5.1 | 0.0017 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48224 |
medium | 5.1 | 0.0026 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48223 |
medium | 5.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48222 |
medium | 5.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48221 |
medium | 5.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48220 |
medium | 5.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48219 |
medium | 5.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48218 |
medium | 5.1 | 0.0026 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48217 |
medium | 5.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48216 |
medium | 5.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48215 |
medium | 5.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48214 |
medium | 5.1 | 0.0021 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48213 |
medium | 5.1 | 0.0017 | 2026-11-08 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-47117 |
critical | 9.3 | 0.0092 | 2026-11-08 | 1 PoC | OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-fil |
CVE-2026-47114 |
high | 8.6 | 0.0070 | 2026-11-08 | IINA before 1.4.3 contains a user-assisted command execution vulnerability that allows rem | |
CVE-2026-47107 |
high | 8.6 | 0.0028 | 2026-11-08 | Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjai | |
CVE-2026-47104 |
medium | 5.1 | 0.0013 | 2026-11-08 | libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse | |
CVE-2026-47102 |
high | 8.7 | 0.0065 | 2026-11-08 | 1 PoC | LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update |
CVE-2026-47101 |
high | 8.7 | 0.0118 | 2026-11-08 | 2 PoC | LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with acc |
CVE-2026-47099 |
low | 2.1 | 0.0036 | 2026-11-08 | TeleJSON prior to 6.0.0 contains a DOM-based cross-site scripting vulnerability in the par | |
CVE-2026-46362 |
medium | 6.5 | 0.0030 | 2026-11-08 | phpMyFAQ before 4.1.2 contains an authorization bypass vulnerability in AbstractAdministra | |
CVE-2026-45246 |
medium | 6.8 | 0.0014 | 2026-11-08 | Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refres | |
CVE-2026-45245 |
medium | 4.6 | 0.0033 | 2026-11-08 | Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allow | |
CVE-2026-45244 |
low | 2.1 | 0.0023 | 2026-11-08 | Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attac | |
CVE-2026-45243 |
medium | 5.3 | 0.0019 | 2026-11-08 | Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content sc | |
CVE-2026-45242 |
high | 7.1 | 0.0040 | 2026-11-08 | Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize dae | |
CVE-2026-45232 |
low | 2.1 | 0.0034 | 2026-11-08 | Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability | |
CVE-2026-44401 |
medium | 4.6 | 0.0032 | 2026-11-08 | 1 PoC | Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the M |
CVE-2026-43634 |
high | 8.7 | 0.0024 | 2026-11-08 | HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows una | |
CVE-2026-43633 |
critical | 9.5 | 0.0107 | 2026-11-08 | HestiaCP versions 1.9.0 through 1.9.4 contain a deserialization vulnerability in the web t | |
CVE-2026-43625 |
high | 8.2 | 0.0019 | 2026-11-08 | CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows netwo | |
CVE-2026-43624 |
high | 8.8 | 0.0059 | 2026-11-08 | F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Grad | |
CVE-2026-43620 |
medium | 6.9 | 0.0043 | 2026-11-08 | Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerabili | |
CVE-2026-43619 |
high | 7.2 | 0.0014 | 2026-11-08 | Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based | |
CVE-2026-43618 |
medium | 6.1 | 0.0078 | 2026-11-08 | Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed- | |
CVE-2026-43617 |
medium | 6.3 | 0.0028 | 2026-11-08 | Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync d | |
CVE-2026-42796 |
critical | 9.2 | 0.0275 | 2026-11-08 | 1 PoC | Arelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in t |
CVE-2026-41950 |
medium | 6.0 | 0.0035 | 2026-11-08 | Dify before version 1.14.0 contains an authorization bypass vulnerability that allows auth |