Browse All CVEs
13,261 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-57214 |
high | 7.1 | 0.0022 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 4.2.5, the RabbitMQ management UI r | |
CVE-2026-57215 |
high | 7.0 | 0.0038 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, | |
CVE-2026-57217 |
high | 7.0 | 0.0035 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.21, 4.1.11, and 4.2.6, | |
CVE-2026-57219 |
high | 8.7 | 0.0284 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, | |
CVE-2026-57220 |
high | 7.5 | 0.0055 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, the RabbitMQ stream listener | |
CVE-2026-57574 |
high | 7.4 | 0.0055 | 2026-10-29 | Misskey is an open source, federated social media platform. Prior to 2026.6.0, Misskey con | |
CVE-2026-58499 |
high | 8.2 | 0.0054 | 2026-10-29 | EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traver | |
CVE-2026-7639 |
high | 7.8 | 0.0018 | 2026-10-29 | Software installed and run as a non-privileged user may conduct a sequence of improper GPU | |
CVE-2026-13244 |
high | 8.1 | 0.0043 | 2026-10-29 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili | |
CVE-2026-15081 |
high | 7.4 | 0.0034 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-49213 |
high | 8.1 | 0.0040 | 2026-10-29 | TypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in pac | |
CVE-2026-52747 |
high | 8.6 | 0.0048 | 2026-10-29 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Ap | |
CVE-2026-54736 |
high | 8.2 | 0.0018 | 2026-10-29 | Phalcon is a high-performance, full-stack PHP framework. Prior to 5.14.1, Phalcon\Encrypti | |
CVE-2026-55809 |
high | 8.1 | 0.0043 | 2026-10-29 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili | |
CVE-2026-55810 |
high | 8.1 | 0.0043 | 2026-10-29 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili | |
CVE-2026-55882 |
high | 8.3 | 0.0052 | 2026-10-29 | Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.19.5 thr | |
CVE-2026-55883 |
high | 8.3 | 0.0026 | 2026-10-29 | Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.24.0 thr | |
CVE-2026-57584 |
high | 8.7 | 0.0053 | 2026-10-29 | Phalcon is a high-performance, full-stack PHP framework. Prior to 5.15.0, every Phalcon MV | |
CVE-2026-42952 |
high | 8.7 | 0.0054 | 2026-10-29 | Previously, there was no throttling on repeated authentication attempts to the charging s | |
CVE-2026-44383 |
high | 8.7 | 0.0056 | 2026-10-29 | Multiple connections to the backend using the same charging station ID are allowed, which | |
CVE-2026-61426 |
high | 8.8 | 0.0040 | 2026-10-29 | PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interf | |
CVE-2026-61429 |
high | 8.4 | 0.0027 | 2026-10-29 | PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in th | |
CVE-2026-61439 |
high | 8.7 | 0.0034 | 2026-10-29 | PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where | |
CVE-2026-61442 |
high | 7.1 | 0.0031 | 2026-10-29 | PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authoriz | |
CVE-2026-61454 |
high | 8.7 | 0.0031 | 2026-10-29 | The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScrip | |
CVE-2026-58281 |
high | 8.3 | 0.0096 | 2026-10-29 | Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorize | |
CVE-2026-15480 |
high | 7.4 | 0.0079 | 2026-10-29 | A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the func | |
CVE-2026-15481 |
high | 7.4 | 0.0289 | 2026-10-29 | A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerabili | |
CVE-2026-15483 |
high | 8.7 | 0.0057 | 2026-10-29 | A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the | |
CVE-2026-15484 |
high | 8.7 | 0.0079 | 2026-10-29 | A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the f | |
CVE-2026-56238 |
high | 8.7 | 0.0047 | 2026-10-29 | Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase Pos | |
CVE-2026-56241 |
high | 7.2 | 0.0026 | 2026-10-29 | Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_ad | |
CVE-2026-56308 |
high | 8.4 | 0.0031 | 2026-10-29 | Capgo before 12.128.2 allows email address changes without requiring current password re-a | |
CVE-2026-56313 |
high | 7.2 | 0.0050 | 2026-10-29 | Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in th | |
CVE-2026-59260 |
high | 8.7 | 0.0088 | 2026-10-29 | OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing a | |
CVE-2026-61875 |
high | 8.7 | 0.0036 | 2026-10-29 | luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthentic | |
CVE-2026-58596 |
high | 8.3 | 0.0061 | 2026-10-29 | Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized at | |
CVE-2026-10665 |
high | 7.4 | 0.0060 | 2026-10-29 | In Zephyr's WireGuard subsystem (subsys/net/lib/wireguard), wg_process_data_message() in w | |
CVE-2026-10667 |
high | 7.8 | 0.0015 | 2026-10-29 | Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/use | |
CVE-2026-15506 |
high | 7.1 | 0.0020 | 2026-10-29 | A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affec | |
CVE-2026-15511 |
high | 8.9 | 0.0473 | 2026-10-29 | A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vu | |
CVE-2026-9492 |
high | 8.5 | 0.0016 | 2026-10-29 | The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed | |
CVE-2026-14165 |
high | 7.5 | 0.0042 | 2026-10-29 | An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterpr | |
CVE-2026-15543 |
high | 7.4 | 0.0085 | 2026-10-29 | A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInf | |
CVE-2026-15544 |
high | 7.4 | 0.0079 | 2026-10-29 | A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affected is the function | |
CVE-2026-57829 |
high | 8.7 | 0.0025 | 2026-10-29 | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 - | |
CVE-2026-57830 |
high | 8.8 | 0.0050 | 2026-10-29 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultim | |
CVE-2026-15545 |
high | 7.4 | 0.0073 | 2026-10-29 | A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerab | |
CVE-2026-15574 |
high | 7.5 | 0.0052 | 2026-10-29 | A flaw was found in the vllm-orchestrator-gateway component. The system's production binar | |
CVE-2026-62143 |
high | 8.3 | 0.0040 | 2026-10-29 | A Server-Side Request Forgery (SSRF) protection bypass existed in the html_to_markdown exp |