Browse All CVEs
9,506 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-7130 |
medium | 5.5 | 0.0025 | 2026-10-29 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The affec | |
CVE-2026-7131 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability has been found in code-projects Online Lot Reservation System up to 1.0. T | |
CVE-2026-7132 |
medium | 5.5 | 0.0044 | 2026-10-29 | A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. This a | |
CVE-2026-7145 |
medium | 5.3 | 0.0024 | 2026-10-29 | A weakness has been identified in mettle sendportal up to 3.0.1. Affected is the function | |
CVE-2026-7146 |
medium | 5.5 | 0.0032 | 2026-10-29 | A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a5 | |
CVE-2026-40970 |
medium | 6.8 | 0.0014 | 2026-10-29 | When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does | |
CVE-2026-7147 |
medium | 5.5 | 0.0028 | 2026-10-29 | A vulnerability was detected in JoeCastrom mcp-chat-studio up to 1.5.0. Affected by this i | |
CVE-2026-7149 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca7 | |
CVE-2026-3087 |
medium | 6.0 | 0.0055 | 2026-10-29 | If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containi | |
CVE-2026-7157 |
medium | 5.5 | 0.0147 | 2026-10-29 | A flaw has been found in disler aider-mcp-server up to b2516fa466d0d851932da92ee6d0e66946d | |
CVE-2026-7158 |
medium | 5.5 | 0.0029 | 2026-10-29 | A vulnerability has been found in dmitryglhf mcp-url-downloader up to 4b8cf2de55f6e8864a77 | |
CVE-2026-7159 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the functi | |
CVE-2026-7177 |
medium | 5.5 | 0.0036 | 2026-10-29 | A security flaw has been discovered in ChatGPTNextWeb NextChat up to 2.16.1. Affected by t | |
CVE-2026-7224 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This a | |
CVE-2026-7225 |
medium | 5.5 | 0.0025 | 2026-10-29 | A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This vulner | |
CVE-2026-7226 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. | |
CVE-2026-7227 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is t | |
CVE-2026-7228 |
medium | 5.5 | 0.0025 | 2026-10-29 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element | |
CVE-2026-7234 |
medium | 5.5 | 0.0043 | 2026-10-29 | A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affec | |
CVE-2026-40966 |
medium | 5.9 | 0.0023 | 2026-10-29 | In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memor | |
CVE-2026-41525 |
medium | 6.5 | 0.0013 | 2026-10-29 | KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) | |
CVE-2026-7235 |
medium | 5.5 | 0.0046 | 2026-10-29 | A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to b185 | |
CVE-2026-7237 |
medium | 5.5 | 0.0045 | 2026-10-29 | A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27. Affected by this issue | |
CVE-2026-40979 |
medium | 6.1 | 0.0010 | 2026-10-29 | In Spring AI, having access to a shared environment can expose the ONNX model used by the | |
CVE-2026-40980 |
medium | 6.5 | 0.0024 | 2026-10-29 | In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreason | |
CVE-2026-7271 |
medium | 5.5 | 0.0048 | 2026-10-29 | A vulnerability was detected in DV0x creative-ad-agent up to 751b9e5146604dc65049bd0f62dcb | |
CVE-2026-7309 |
medium | 4.3 | 0.0018 | 2026-10-29 | A flaw was found in the OpenShift Container Platform build system. A user with the `edit` | |
CVE-2026-40550 |
medium | 6.9 | 0.0012 | 2026-10-29 | Multiple BinSoft products are vulnerable to Privilege Escalation due to excessive database | |
CVE-2026-40552 |
medium | 4.7 | 0.0029 | 2026-10-29 | Multiple BinSoft products are vulnerable to Remote Command Execution. An authorized user w | |
CVE-2026-5944 |
medium | 6.7 | 0.0053 | 2026-10-29 | An improper access control vulnerability exists in the Cisco Intersight Device Connector f | |
CVE-2026-6706 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper access control in the vault documentation feature in Devolutions Server allows | |
CVE-2026-7272 |
medium | 5.5 | 0.0042 | 2026-10-29 | A flaw has been found in WilliamCloudQi matlab-mcp-server up to ab88f6b9bf5f36f725e8628029 | |
CVE-2026-40969 |
medium | 5.3 | 0.0020 | 2026-10-29 | The raw message of every server-side AuthenticationException is returned to the unauthenti | |
CVE-2026-24204 |
medium | 6.5 | 0.0036 | 2026-10-29 | NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Va | |
CVE-2026-24231 |
medium | 6.3 | 0.0013 | 2026-10-29 | NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection comp | |
CVE-2026-5794 |
medium | 4.9 | 0.0026 | 2026-10-29 | A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to p | |
CVE-2026-6807 |
medium | 5.5 | 0.0020 | 2026-10-29 | A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to trigger improper han | |
CVE-2026-21023 |
medium | 6.9 | 0.0010 | 2026-10-29 | Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2 | |
CVE-2026-42412 |
medium | 6.5 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrect | |
CVE-2026-22740 |
medium | 6.5 | 0.0034 | 2026-10-29 | A WebFlux server application that processes multipart requests creates temp files for part | |
CVE-2026-22745 |
medium | 5.3 | 0.0034 | 2026-10-29 | Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resol | |
CVE-2026-42641 |
medium | 5.4 | 0.0014 | 2026-10-29 | Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-imag | |
CVE-2026-42642 |
medium | 5.3 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly | |
CVE-2026-42643 |
medium | 5.9 | 0.0014 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42644 |
medium | 5.3 | 0.0025 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-42645 |
medium | 4.3 | 0.0010 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barco | |
CVE-2026-42648 |
medium | 4.3 | 0.0016 | 2026-10-29 | Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenb | |
CVE-2026-42519 |
medium | 4.3 | 0.0017 | 2026-10-29 | A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earli | |
CVE-2026-42521 |
medium | 6.5 | 0.0025 | 2026-10-29 | Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) inv | |
CVE-2026-42522 |
medium | 4.3 | 0.0018 | 2026-10-29 | A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ a |