Browse All CVEs
10,136 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42857 |
medium | 5.4 | 0.0018 | 2026-10-29 | Open edX Platform enables the authoring and delivery of online learning at any scale. The | |
CVE-2026-43638 |
medium | 5.3 | 0.0019 | 2026-10-29 | Bitwarden Server prior to v2026.4.1 contains a missing authorization vulnerability that al | |
CVE-2026-43894 |
medium | 5.5 | 0.0016 | 2026-10-29 | jq is a command-line JSON processor. In 1.8.1 and earlier, when decNumberFromString is giv | |
CVE-2026-43895 |
medium | 4.4 | 0.0016 | 2026-10-29 | jq is a command-line JSON processor. In 1.8.1 and earlier, jq accepts embedded NUL bytes i | |
CVE-2026-43896 |
medium | 5.5 | 0.0015 | 2026-10-29 | jq is a command-line JSON processor. In 1.8.1 and earlier, unbounded recursion in jv_objec | |
CVE-2026-43995 |
medium | 5.3 | 0.0040 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-44659 |
medium | 4.7 | 0.0016 | 2026-10-29 | Zen is a firefox-based browser. Prior to 1.19.12b, the ZEN Browser incorrectly truncates l | |
CVE-2026-44777 |
medium | 5.4 | 0.0016 | 2026-10-29 | jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader r | |
CVE-2026-7210 |
medium | 6.3 | 0.0067 | 2026-10-29 | `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-fl | |
CVE-2026-7308 |
medium | 5.1 | 0.0026 | 2026-10-29 | An authenticated user with upload permission to a hosted repository can store content that | |
CVE-2026-42866 |
medium | 6.7 | 0.0021 | 2026-10-29 | Tookie is a advanced OSINT information gathering tool. Prior to 4.1fix, modules/modules.py | |
CVE-2026-42871 |
medium | 6.9 | 0.0025 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/f | |
CVE-2026-43968 |
medium | 6.3 | 0.0027 | 2026-10-29 | Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines co | |
CVE-2026-45222 |
medium | 6.9 | 0.0015 | 2026-10-29 | Summarize versions through 0.14.1, fixed in commit 0cfb0fb, creates the daemon configurati | |
CVE-2026-45224 |
medium | 6.8 | 0.0014 | 2026-10-29 | Crabbox before 0.9.0 contains a path traversal vulnerability in the Islo provider's worksp | |
CVE-2026-8318 |
medium | 5.5 | 0.0037 | 2026-10-29 | A security flaw has been discovered in VectifyAI PageIndex up to f50e52975313c6716c02b20a1 | |
CVE-2026-42565 |
medium | 4.3 | 0.0019 | 2026-10-29 | @workos/authkit-session is a toolkit for building WorkOS AuthKit framework integrations. P | |
CVE-2026-42870 |
medium | 6.4 | 0.0035 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, a Stored C | |
CVE-2026-42872 |
medium | 6.1 | 0.0021 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, a reflecte | |
CVE-2026-42883 |
medium | 6.5 | 0.0026 | 2026-10-29 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the GET /ap | |
CVE-2026-42884 |
medium | 4.3 | 0.0020 | 2026-10-29 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the GET /ap | |
CVE-2026-42885 |
medium | 4.3 | 0.0028 | 2026-10-29 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /a | |
CVE-2026-42886 |
medium | 4.9 | 0.0031 | 2026-10-29 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /a | |
CVE-2026-42887 |
medium | 4.5 | 0.0026 | 2026-10-29 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.33.0, a stored cr | |
CVE-2026-45025 |
medium | 6.8 | 0.0029 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, a Stored C | |
CVE-2026-45026 |
medium | 6.8 | 0.0029 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, a Stored C | |
CVE-2026-6146 |
medium | 5.3 | 0.0017 | 2026-10-29 | Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys. | |
CVE-2026-8319 |
medium | 5.5 | 0.0038 | 2026-10-29 | A weakness has been identified in aiwaves-cn agents up to e8c4e3c2d19739d3dff59e577d1c9709 | |
CVE-2026-8321 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the func | |
CVE-2026-20696 |
medium | 5.5 | 0.0012 | 2026-10-29 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-28819 |
medium | 5.4 | 0.0650 | 2026-10-29 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi | |
CVE-2026-28830 |
medium | 4.7 | 0.0008 | 2026-10-29 | A race condition was addressed with additional validation. This issue is fixed in macOS Ta | |
CVE-2026-28897 |
medium | 6.2 | 0.0017 | 2026-10-29 | A buffer overflow was addressed with improved input validation. This issue is fixed in iOS | |
CVE-2026-28914 |
medium | 5.5 | 0.0020 | 2026-10-29 | A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequ | |
CVE-2026-28917 |
medium | 4.3 | 0.0030 | 2026-10-29 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.5 | |
CVE-2026-28918 |
medium | 6.5 | 0.0049 | 2026-10-29 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is f | |
CVE-2026-28920 |
medium | 6.5 | 0.0032 | 2026-10-29 | An information leakage was addressed with additional validation. This issue is fixed in iO | |
CVE-2026-28922 |
medium | 6.5 | 0.0032 | 2026-10-29 | This issue was addressed through improved state management. This issue is fixed in macOS S | |
CVE-2026-28956 |
medium | 6.5 | 0.0052 | 2026-10-29 | A memory corruption issue was addressed with improved input validation. This issue is fixe | |
CVE-2026-28958 |
medium | 5.5 | 0.0014 | 2026-10-29 | This issue was addressed with improved data protection. This issue is fixed in Safari 26.5 | |
CVE-2026-28961 |
medium | 4.6 | 0.0024 | 2026-10-29 | This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8 | |
CVE-2026-28963 |
medium | 4.6 | 0.0016 | 2026-10-29 | A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS | |
CVE-2026-28967 |
medium | 4.9 | 0.0032 | 2026-10-29 | A denial-of-service issue was addressed with improved input validation. This issue is fixe | |
CVE-2026-28971 |
medium | 4.3 | 0.0030 | 2026-10-29 | The issue was addressed with improved UI handling. This issue is fixed in Safari 26.5, iOS | |
CVE-2026-28972 |
medium | 6.5 | 0.0138 | 2026-10-29 | An out-of-bounds write issue was addressed with improved input validation. This issue is f | |
CVE-2026-28977 |
medium | 6.2 | 0.0016 | 2026-10-29 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.9 and | |
CVE-2026-28985 |
medium | 6.2 | 0.0016 | 2026-10-29 | A null pointer dereference was addressed with improved input validation. This issue is fix | |
CVE-2026-28988 |
medium | 5.5 | 0.0013 | 2026-10-29 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS | |
CVE-2026-28992 |
medium | 4.7 | 0.0014 | 2026-10-29 | A memory corruption vulnerability was addressed with improved locking. This issue is fixed | |
CVE-2026-28993 |
medium | 5.5 | 0.0012 | 2026-10-29 | This issue was addressed by adding an additional prompt for user consent. This issue is fi |