Browse All CVEs
13,251 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-57786 |
high | 8.8 | 0.0023 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core workscout-cor | |
CVE-2026-57787 |
high | 8.5 | 0.0036 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-57788 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57789 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57790 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57791 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57792 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57793 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57794 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57795 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57796 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57798 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57799 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57800 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57801 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57802 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57803 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57804 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57805 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57810 |
high | 8.5 | 0.0036 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-57814 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57815 |
high | 7.5 | 0.0050 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-57816 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-59516 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-59521 |
high | 7.2 | 0.0054 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Real Testimonials test | |
CVE-2026-61955 |
high | 7.6 | 0.0038 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-61956 |
high | 7.1 | 0.0016 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in hamsalam ووسلام – همگام سازی ووکا | |
CVE-2026-15584 |
high | 7.5 | 0.0042 | 2026-10-29 | A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. | |
CVE-2026-58065 |
high | 8.1 | 0.0074 | 2026-10-29 | The Apache Airflow Git provider runs its git-over-SSH operations with `StrictHostKeyChecki | |
CVE-2026-59245 |
high | 8.1 | 0.0060 | 2026-10-29 | In the Apache Airflow FAB auth manager, a DAG whose `dag_id` is `DAGs` collided with the g | |
CVE-2026-57432 |
high | 8.4 | 0.0021 | 2026-10-29 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 | |
CVE-2026-61463 |
high | 8.7 | 0.0047 | 2026-10-29 | Shiori contains a privilege escalation vulnerability in the account update endpoint that a | |
CVE-2026-49970 |
high | 8.7 | 0.0103 | 2026-10-29 | Laravel-Mediable before 7.0.0 contains a path traversal vulnerability in the File::sanitiz | |
CVE-2026-49972 |
high | 7.7 | 0.0108 | 2026-10-29 | Laravel-Mediable before 7.0.0 contains a file upload vulnerability that allows unauthentic | |
CVE-2026-55772 |
high | 8.8 | 0.0048 | 2026-10-29 | CedarJava is an open source Java implementation of the Cedar policy language, used for fin | |
CVE-2026-55771 |
high | 8.8 | 0.0057 | 2026-10-29 | CedarJava is an open source Java implementation of the Cedar policy language, used for fin | |
CVE-2026-55773 |
high | 8.8 | 0.0052 | 2026-10-29 | CedarJava is an open source Java implementation of the Cedar policy language, used for fin | |
CVE-2026-48363 |
high | 8.2 | 0.0027 | 2026-10-29 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Pat | |
CVE-2026-48364 |
high | 8.2 | 0.0027 | 2026-10-29 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Pat | |
CVE-2026-58410 |
high | 7.1 | 0.0021 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an | |
CVE-2026-15680 |
high | 7.5 | 0.0041 | 2026-10-29 | Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution | |
CVE-2026-15683 |
high | 7.5 | 0.0015 | 2026-10-29 | Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Valida | |
CVE-2026-15684 |
high | 7.3 | 0.0019 | 2026-10-29 | Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vu | |
CVE-2026-58411 |
high | 7.0 | 0.0043 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, Cross-Site S | |
CVE-2026-58500 |
high | 8.2 | 0.0040 | 2026-10-29 | MCP Appium is an MCP server that provides AI assistants with tools to automate mobile app | |
CVE-2026-61458 |
high | 8.7 | 0.0038 | 2026-10-29 | PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/acc | |
CVE-2026-62184 |
high | 8.7 | 0.0056 | 2026-10-29 | luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts th | |
CVE-2026-62185 |
high | 8.6 | 0.0046 | 2026-10-29 | Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing an | |
CVE-2026-62186 |
high | 7.2 | 0.0033 | 2026-10-29 | OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI- | |
CVE-2026-62187 |
high | 8.6 | 0.0037 | 2026-10-29 | OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore |