Browse All CVEs
9,966 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-7254 |
medium | 5.3 | 0.0024 | 2026-10-29 | IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unau | |
CVE-2026-8405 |
medium | 6.5 | 0.0023 | 2026-10-29 | IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protect | |
CVE-2026-42184 |
medium | 6.1 | 0.0031 | 2026-10-29 | Tauri is a framework for building binaries for all major desktop platforms. From 2.0 to 2. | |
CVE-2026-44838 |
medium | 5.3 | 0.0020 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. From 4.2.0 to before 4.2.4, RabbitMQ's MQTT | |
CVE-2026-44839 |
medium | 5.6 | 0.0018 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This | |
CVE-2026-44972 |
medium | 5.0 | 0.0011 | 2026-10-29 | GuardDog is a CLI tool to identify malicious PyPI packages. From 2.6.0 to 2.9.0, GuardDog | |
CVE-2026-47119 |
medium | 5.3 | 0.0024 | 2026-10-29 | Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that a | |
CVE-2026-48916 |
medium | 6.6 | 0.0027 | 2026-10-29 | Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals. | |
CVE-2026-48917 |
medium | 6.6 | 0.0026 | 2026-10-29 | Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals wi | |
CVE-2026-48926 |
medium | 4.3 | 0.0017 | 2026-10-29 | Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission ch | |
CVE-2026-48973 |
medium | 4.3 | 0.0020 | 2026-10-29 | Missing Authorization vulnerability in Benbodhi SVG Support allows Exploiting Incorrectly | |
CVE-2026-49044 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-49045 |
medium | 4.3 | 0.0021 | 2026-10-29 | Missing Authorization vulnerability in WP Media Adminimize allows Exploiting Incorrectly C | |
CVE-2026-49047 |
medium | 4.3 | 0.0016 | 2026-10-29 | Missing Authorization vulnerability in DearHive DearFlip allows Exploiting Incorrectly Con | |
CVE-2026-49051 |
medium | 4.3 | 0.0022 | 2026-10-29 | Missing Authorization vulnerability in Prasad Kirpekar WP Meta and Date Remover allows Exp | |
CVE-2026-49059 |
medium | 4.7 | 0.0023 | 2026-10-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Facebook Facebook for | |
CVE-2026-44475 |
medium | 6.1 | 0.0015 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core does not | |
CVE-2026-45027 |
medium | 5.9 | 0.0017 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a use | |
CVE-2026-45335 |
medium | 5.4 | 0.0018 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to 3.7.3, an Open Redirect vulne | |
CVE-2026-49054 |
medium | 4.3 | 0.0021 | 2026-10-29 | Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Inco | |
CVE-2025-67903 |
medium | 5.3 | 0.0018 | 2026-10-29 | Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification b | |
CVE-2026-42328 |
medium | 6.2 | 0.0012 | 2026-10-29 | go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interface | |
CVE-2026-44378 |
medium | 6.9 | 0.0032 | 2026-10-29 | Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite lengt | |
CVE-2026-45081 |
medium | 6.5 | 0.0020 | 2026-10-29 | Frappe HR is an open-source human resources management solution (HRMS). Prior to 16.5.0, a | |
CVE-2026-42878 |
medium | 5.3 | 0.0090 | 2026-10-29 | FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an una | |
CVE-2026-42879 |
medium | 6.3 | 0.0023 | 2026-10-29 | FacturaScripts is an open source accounting and invoicing software. In 2025.81 and earlier | |
CVE-2026-45046 |
medium | 5.5 | 0.0011 | 2026-10-29 | Gryph provides a security layer for AI coding agents. Prior to 0.7.0, Gryph implements log | |
CVE-2026-42877 |
medium | 5.4 | 0.0019 | 2026-10-29 | FacturaScripts is an open source accounting and invoicing software. In 2025.92 and earlier | |
CVE-2026-47271 |
medium | 5.1 | 0.0012 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-47273 |
medium | 6.5 | 0.0027 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-47274 |
medium | 6.3 | 0.0014 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-48065 |
medium | 6.7 | 0.0015 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-48066 |
medium | 5.7 | 0.0012 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-48792 |
medium | 4.4 | 0.0013 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-21785 |
medium | 4.0 | 0.0015 | 2026-10-29 | A misconfigured Content Security Policy (CSP) in HCL BigFix Remote Control Server WebUI (v | |
CVE-2026-44710 |
medium | 4.6 | 0.0018 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-47270 |
medium | 6.3 | 0.0011 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-44720 |
medium | 6.9 | 0.0021 | 2026-10-29 | OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0 | |
CVE-2026-46416 |
medium | 6.3 | 0.0032 | 2026-10-29 | Microsoft UFO open-source framework for intelligent automation across devices and platform | |
CVE-2026-46538 |
medium | 5.9 | 0.0022 | 2026-10-29 | Microsoft UFO open-source framework for intelligent automation across devices and platform | |
CVE-2026-46544 |
medium | 5.3 | 0.0046 | 2026-10-29 | Microsoft UFO open-source framework for intelligent automation across devices and platform | |
CVE-2026-9791 |
medium | 4.3 | 0.0022 | 2026-10-29 | A flaw was found in Keycloak. An authenticated user with existing organization membership | |
CVE-2026-9792 |
medium | 6.5 | 0.0027 | 2026-10-29 | A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.prot | |
CVE-2026-9794 |
medium | 5.3 | 0.0044 | 2026-10-29 | A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerab | |
CVE-2026-9796 |
medium | 6.5 | 0.0022 | 2026-10-29 | A flaw was found in Keycloak. An authenticated administrator with the `manage-clients` rol | |
CVE-2026-9798 |
medium | 4.3 | 0.0037 | 2026-10-29 | A flaw was found in Keycloak, an open-source identity and access management solution. When | |
CVE-2026-9801 |
medium | 4.9 | 0.0048 | 2026-10-29 | A flaw was found in Keycloak. A remote attacker with high privileges, such as a realm admi | |
CVE-2026-9802 |
medium | 6.8 | 0.0030 | 2026-10-29 | A flaw was found in Keycloak. When revokeRefreshToken=true is enabled and persistent sessi | |
CVE-2026-9803 |
medium | 5.3 | 0.0042 | 2026-10-29 | A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated | |
CVE-2026-9806 |
medium | 6.3 | 0.0026 | 2026-10-29 | A stored cross-site scripting (XSS) vulnerability exists in the notification panel of CTI |