Browse All CVEs
9,484 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-33523 |
medium | 6.5 | 0.0044 | 2026-10-29 | HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untruste | |
CVE-2026-6500 |
medium | 4.8 | 0.0010 | 2026-10-29 | Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retr | |
CVE-2026-6501 |
medium | 5.3 | 0.0023 | 2026-10-29 | Improper restriction of XML external entity reference vulnerability in ILM Informatique jO | |
CVE-2026-42077 |
medium | 5.2 | 0.0016 | 2026-10-29 | Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a pr | |
CVE-2026-42078 |
medium | 4.6 | 0.0020 | 2026-10-29 | PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418 | |
CVE-2026-42080 |
medium | 4.6 | 0.0020 | 2026-10-29 | PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418 | |
CVE-2026-41572 |
medium | 5.3 | 0.0024 | 2026-10-29 | Note Mark is an open-source note-taking application. Prior to version 0.19.3, after a note | |
CVE-2026-42052 |
medium | 6.0 | 0.0030 | 2026-10-29 | Beets is the media library management system. Prior to version 2.10.0, the bundled web UI | |
CVE-2026-42085 |
medium | 4.3 | 0.0031 | 2026-10-29 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from | |
CVE-2026-42086 |
medium | 4.6 | 0.0020 | 2026-10-29 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from | |
CVE-2026-42091 |
medium | 6.5 | 0.0016 | 2026-10-29 | goshs is a SimpleHTTPServer written in Go. Prior to version 2.0.2, the PUT upload handler | |
CVE-2026-42092 |
medium | 6.5 | 0.0022 | 2026-10-29 | titra is an open source time tracking project. In version 0.99.52, the globalsettings Mete | |
CVE-2026-42138 |
medium | 6.9 | 0.0024 | 2026-10-29 | Dify is an open-source LLM app development platform. Prior to version 1.13.1, using the me | |
CVE-2026-42140 |
medium | 4.4 | 0.0018 | 2026-10-29 | PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes. Prior to | |
CVE-2026-42144 |
medium | 6.1 | 0.0014 | 2026-10-29 | CImg Library is a C++ library for image processing. Prior to commit 4ca26bc, there is an i | |
CVE-2026-42146 |
medium | 5.5 | 0.0018 | 2026-10-29 | CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nb_colors | |
CVE-2026-43616 |
medium | 6.8 | 0.0017 | 2026-10-29 | Detect-It-Easy prior to 3.21 contains a path traversal vulnerability that allows attackers | |
CVE-2026-41686 |
medium | 4.8 | 0.0012 | 2026-10-29 | Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or | |
CVE-2026-42229 |
medium | 5.3 | 0.0034 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, an | |
CVE-2026-42220 |
medium | 6.5 | 0.0030 | 2026-10-29 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, an auth | |
CVE-2026-42223 |
medium | 6.5 | 0.0029 | 2026-10-29 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the Get | |
CVE-2026-7784 |
medium | 5.5 | 0.0050 | 2026-10-29 | A vulnerability has been found in RTGS2017 NagaAgent up to 5.1.0. This issue affects some | |
CVE-2026-7788 |
medium | 5.5 | 0.0041 | 2026-10-29 | A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9 | |
CVE-2026-44029 |
medium | 5.3 | 0.0057 | 2026-10-29 | An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "ni | |
CVE-2026-7810 |
medium | 5.5 | 0.0041 | 2026-10-29 | A flaw has been found in UsamaK98 python-notebook-mcp up to a05a232815809a7e425b5fa7be26e0 | |
CVE-2026-7811 |
medium | 5.5 | 0.0042 | 2026-10-29 | A vulnerability has been found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e3 | |
CVE-2026-7812 |
medium | 5.5 | 0.0147 | 2026-10-29 | A vulnerability was found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a | |
CVE-2026-6180 |
medium | 4.1 | 0.0034 | 2026-10-29 | A race condition exists in PaperCut MF when processing badge-swipe data from certain HP mu | |
CVE-2026-6418 |
medium | 4.6 | 0.0056 | 2026-10-29 | An issue was discovered in the Shared Account Synchronization component of PaperCut MF (ve | |
CVE-2026-7824 |
medium | 5.9 | 0.0024 | 2026-10-29 | An issue was discovered in the PaperCut Hive Ricoh embedded application. When the "Deep Lo | |
CVE-2023-54349 |
medium | 5.1 | 0.0027 | 2026-10-29 | AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unaut | |
CVE-2026-6262 |
medium | 6.5 | 0.0035 | 2026-10-29 | The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to | |
CVE-2026-30246 |
medium | 6.5 | 0.0025 | 2026-10-29 | Fiber is a web framework for Go. In github.com/gofiber/fiber/v3 versions through 3.1.0, th | |
CVE-2026-7832 |
medium | 6.4 | 0.0013 | 2026-10-29 | A security flaw has been discovered in IObit Advanced SystemCare 19. This affects an unkno | |
CVE-2026-7778 |
medium | 5.0 | 0.0017 | 2026-10-29 | An issue that could allow a dashboard configuration to be viewed from outside of the autho | |
CVE-2026-34956 |
medium | 5.9 | 0.0040 | 2026-10-29 | A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow us | |
CVE-2026-5766 |
medium | 6.3 | 0.0042 | 2026-10-29 | An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. ASGI requests with a mi | |
CVE-2026-35253 |
medium | 4.7 | 0.0015 | 2026-10-29 | Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The suppo | |
CVE-2026-35254 |
medium | 6.1 | 0.0015 | 2026-10-29 | Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported | |
CVE-2026-35255 |
medium | 6.6 | 0.0018 | 2026-10-29 | Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Ora | |
CVE-2026-40001 |
medium | 5.2 | 0.0013 | 2026-10-29 | There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of th | |
CVE-2026-42509 |
medium | 6.1 | 0.0036 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-43975 |
medium | 6.5 | 0.0073 | 2026-10-29 | FolderUploadsFileManager in Apache Wicket does not validate or sanitize the uploadFieldId | |
CVE-2026-6860 |
medium | 6.9 | 0.0024 | 2026-10-29 | A TCP client can perform a TLS handshake and present the server name extension with a serv | |
CVE-2026-6420 |
medium | 6.3 | 0.0012 | 2026-10-29 | A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine | |
CVE-2026-8026 |
medium | 6.3 | 0.0026 | 2026-10-29 | A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the fun | |
CVE-2026-8027 |
medium | 5.3 | 0.0029 | 2026-10-29 | A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnera | |
CVE-2026-6863 |
medium | 6.8 | 0.0024 | 2026-10-29 | Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in | |
CVE-2026-20168 |
medium | 6.5 | 0.0027 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director | |
CVE-2026-20169 |
medium | 6.4 | 0.0021 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director |