Browse All CVEs
9,509 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-41415 |
medium | 6.7 | 0.0031 | 2026-10-29 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and | |
CVE-2026-41418 |
medium | 5.3 | 0.0020 | 2026-10-29 | 4ga Boards is a boards system for realtime project management. Prior to 3.3.5, 4ga Boards | |
CVE-2026-41244 |
medium | 4.7 | 0.0011 | 2026-10-29 | Mojic is a CLI tool to transform readable C code into an unrecognizable chaotic stream of | |
CVE-2026-41472 |
medium | 5.3 | 0.0052 | 2026-10-29 | CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in | |
CVE-2026-6980 |
medium | 5.5 | 0.0278 | 2026-10-29 | A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230e | |
CVE-2026-6982 |
medium | 5.3 | 0.0024 | 2026-10-29 | A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by t | |
CVE-2026-6985 |
medium | 5.5 | 0.0056 | 2026-10-29 | A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects | |
CVE-2026-6993 |
medium | 5.5 | 0.0032 | 2026-10-29 | A security flaw has been discovered in go-kratos kratos up to 2.9.2. This impacts the func | |
CVE-2026-7002 |
medium | 6.9 | 0.0025 | 2026-10-29 | A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability | |
CVE-2026-42254 |
medium | 4.0 | 0.0016 | 2026-10-29 | Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached | |
CVE-2026-42255 |
medium | 6.5 | 0.0021 | 2026-10-29 | Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server | |
CVE-2026-7022 |
medium | 5.5 | 0.0038 | 2026-10-29 | A security vulnerability has been detected in SmythOS sre up to 0.0.15. Affected is the fu | |
CVE-2026-7025 |
medium | 5.5 | 0.0030 | 2026-10-29 | A vulnerability was found in Typecho up to 1.3.0. This vulnerability affects the function | |
CVE-2026-7026 |
medium | 5.4 | 0.0056 | 2026-10-29 | A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknow | |
CVE-2026-7036 |
medium | 5.5 | 0.0054 | 2026-10-29 | A vulnerability was identified in Tenda i9 1.0.0.5(2204). This vulnerability affects the f | |
CVE-2026-7042 |
medium | 5.5 | 0.0038 | 2026-10-29 | A flaw has been found in 666ghj MiroFish up to 0.1.2. This affects the function create_app | |
CVE-2026-7045 |
medium | 5.3 | 0.0024 | 2026-10-29 | A vulnerability was determined in baomidou dynamic-datasource 2.5.0. Affected by this vuln | |
CVE-2026-7058 |
medium | 5.5 | 0.0147 | 2026-10-29 | A vulnerability has been found in 666ghj MiroFish up to 0.1.2. The impacted element is the | |
CVE-2026-7059 |
medium | 5.5 | 0.0044 | 2026-10-29 | A vulnerability was found in 666ghj MiroFish up to 0.1.2. This affects the function get_si | |
CVE-2026-7060 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d12 | |
CVE-2026-7061 |
medium | 5.5 | 0.0149 | 2026-10-29 | A weakness has been identified in Toowiredd chatgpt-mcp-server up to 0.1.0. Affected by th | |
CVE-2026-7062 |
medium | 5.5 | 0.0150 | 2026-10-29 | A security vulnerability has been detected in Intina47 context-sync up to 2.0.0. This affe | |
CVE-2026-7063 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was detected in code-projects Employee Management System 1.0. This vulnera | |
CVE-2026-7064 |
medium | 5.5 | 0.0238 | 2026-10-29 | A flaw has been found in AgentDeskAI browser-tools-mcp up to 1.2.0. This issue affects som | |
CVE-2026-33566 |
medium | 5.1 | 0.0018 | 2026-10-29 | There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Win | |
CVE-2026-7065 |
medium | 5.5 | 0.0029 | 2026-10-29 | A vulnerability has been found in BidingCC BuildingAI up to 26.0.1. Impacted is the functi | |
CVE-2026-7066 |
medium | 5.5 | 0.0147 | 2026-10-29 | A vulnerability was found in choieastsea simple-openstack-mcp up to 767b2f4a8154cca344344b | |
CVE-2026-7067 |
medium | 5.5 | 0.0272 | 2026-10-29 | A vulnerability was determined in D-Link DIR-822 A_101. The impacted element is the functi | |
CVE-2026-7070 |
medium | 5.5 | 0.0025 | 2026-10-29 | A weakness has been identified in code-projects Inventory Management System 1.0. Affected | |
CVE-2026-7071 |
medium | 5.5 | 0.0038 | 2026-10-29 | A security vulnerability has been detected in CodeAstro Online Job Portal 1.0. Affected by | |
CVE-2026-7072 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was detected in CodePanda Source canteen_management_system 1.0. Affected b | |
CVE-2026-7073 |
medium | 5.5 | 0.0025 | 2026-10-29 | A flaw has been found in itsourcecode Construction Management System 1.0. This affects an | |
CVE-2026-7074 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability has been found in itsourcecode Construction Management System 1.0. This vu | |
CVE-2026-7075 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was found in itsourcecode Construction Management System 1.0. This issue a | |
CVE-2026-7076 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was determined in itsourcecode Courier Management System 1.0. Impacted is | |
CVE-2026-7077 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was identified in itsourcecode Courier Management System 1.0. The affected | |
CVE-2026-3867 |
medium | 6.0 | 0.0024 | 2026-10-29 | An improper ownership management vulnerability has been identified in Moxa’s Secure Router | |
CVE-2026-7087 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System | |
CVE-2026-7088 |
medium | 5.5 | 0.0025 | 2026-10-29 | A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. | |
CVE-2026-7094 |
medium | 5.5 | 0.0032 | 2026-10-29 | A vulnerability was determined in ShadowCloneLabs GlutamateMCPServers up to e2de73280b01e5 | |
CVE-2026-22077 |
medium | 5.6 | 0.0008 | 2026-10-29 | OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass | |
CVE-2026-7109 |
medium | 5.5 | 0.0029 | 2026-10-29 | A vulnerability was detected in code-projects Invoice System in Laravel 1.0. This impacts | |
CVE-2026-42410 |
medium | 6.5 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-5937 |
medium | 5.5 | 0.0010 | 2026-10-29 | Insufficient parameter verification leads to the occurrence of format errors in files, whi | |
CVE-2026-5938 |
medium | 5.5 | 0.0010 | 2026-10-29 | Improper control flow management allows a crafted document action chain to cause modal dia | |
CVE-2026-5939 |
medium | 5.5 | 0.0011 | 2026-10-29 | A crafted XFA PDF can trigger a use-after-free condition during calculate event processing | |
CVE-2026-5940 |
medium | 5.5 | 0.0017 | 2026-10-29 | Calling a function that triggers a UI refresh after removing comments via a script may acc | |
CVE-2026-5942 |
medium | 5.5 | 0.0018 | 2026-10-29 | Flaws in page lifecycle management allow document structure changes to desynchronize inter | |
CVE-2026-40557 |
medium | 4.8 | 0.0019 | 2026-10-29 | Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheu | |
CVE-2026-41081 |
medium | 6.5 | 0.0029 | 2026-10-29 | Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assi |