Browse All CVEs
13,225 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40501 |
high | 8.6 | 0.0080 | 2026-10-29 | Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote cod | |
CVE-2026-56687 |
high | 7.8 | 0.0015 | 2026-10-29 | Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerab | |
CVE-2026-58659 |
high | 8.4 | 0.0063 | 2026-10-29 | PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution | |
CVE-2026-59255 |
high | 7.1 | 0.0044 | 2026-10-29 | BloodHound through 9.4.0, fixed in commit 8f79035, contains a missing authorization vulner | |
CVE-2026-59258 |
high | 7.2 | 0.0046 | 2026-10-29 | immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/ | |
CVE-2026-15895 |
high | 8.4 | 0.0108 | 2026-10-29 | OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 | |
CVE-2026-46485 |
high | 8.2 | 0.0038 | 2026-10-29 | Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC | |
CVE-2026-49987 |
high | 7.5 | 0.0070 | 2026-10-29 | Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, src/cor | |
CVE-2026-62349 |
high | 8.3 | 0.0050 | 2026-10-29 | TDengine is an open source, time-series database optimized for Internet of Things devices. | |
CVE-2026-62350 |
high | 7.2 | 0.0046 | 2026-10-29 | TDengine is an open source, time-series database optimized for Internet of Things devices. | |
CVE-2026-62351 |
high | 7.5 | 0.0039 | 2026-10-29 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4. | |
CVE-2026-33443 |
high | 7.1 | 0.0037 | 2026-10-29 | CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attac | |
CVE-2026-40952 |
high | 8.5 | 0.0014 | 2026-10-29 | CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Wind | |
CVE-2026-45738 |
high | 8.7 | 0.0061 | 2026-10-29 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to 3.2.12, | |
CVE-2026-50144 |
high | 7.1 | 0.0016 | 2026-10-29 | ncnn is a high-performance neural network inference framework optimized for the mobile pla | |
CVE-2026-52869 |
high | 7.1 | 0.0053 | 2026-10-29 | The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Pr | |
CVE-2026-52870 |
high | 7.6 | 0.0039 | 2026-10-29 | The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Pr | |
CVE-2026-33445 |
high | 8.7 | 0.0040 | 2026-10-29 | CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.5 | |
CVE-2026-49353 |
high | 7.5 | 0.0034 | 2026-10-29 | 9Router is an AI router & token saver. In 0.4.45 and earlier, 9Router's src/dashboardGuard | |
CVE-2026-56679 |
high | 8.7 | 0.0040 | 2026-10-29 | 9Router is an AI router & token saver. Prior to 0.5.4, the PATCH /api/settings endpoint wr | |
CVE-2026-59950 |
high | 7.6 | 0.0023 | 2026-10-29 | The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Pr | |
CVE-2026-62312 |
high | 8.8 | 0.0092 | 2026-10-29 | 9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticat | |
CVE-2026-36590 |
high | 7.5 | 0.0059 | 2026-10-29 | An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via | |
CVE-2026-45313 |
high | 7.7 | 0.0015 | 2026-10-29 | Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1. | |
CVE-2026-48795 |
high | 8.6 | 0.0055 | 2026-10-29 | AdonisJS is a TypeScript-first web framework. From 10.1.3 until 10.1.5 and 11.0.3, AdonisJ | |
CVE-2026-49279 |
high | 7.7 | 0.0040 | 2026-10-29 | WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS | |
CVE-2026-63175 |
high | 7.1 | 0.0047 | 2026-10-29 | PlaywrightCapture stored capture-specific configuration and runtime data as mutable class- | |
CVE-2026-21729 |
high | 7.5 | 0.0046 | 2026-10-29 | Loki queries with large limits can cause large memory allocations which can impact the ava | |
CVE-2026-58078 |
high | 8.7 | 0.0040 | 2026-10-29 | Joomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro | |
CVE-2026-6423 |
high | 8.5 | 0.0017 | 2026-10-29 | A local privilege escalation vulnerability in ESET Inspect Connector. The vulnerability w | |
CVE-2026-35147 |
high | 8.2 | 0.0043 | 2026-10-29 | HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. | |
CVE-2026-35149 |
high | 8.2 | 0.0042 | 2026-10-29 | HCL DFXServer is affected by an Authentication Bypass vulnerability via server response ma | |
CVE-2026-35140 |
high | 7.2 | 0.0028 | 2026-10-29 | HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cook | |
CVE-2026-35142 |
high | 8.2 | 0.0032 | 2026-10-29 | HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The appli | |
CVE-2026-56454 |
high | 7.5 | 0.0022 | 2026-10-29 | HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS | |
CVE-2026-56455 |
high | 7.5 | 0.0046 | 2026-10-29 | HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial | |
CVE-2026-14254 |
high | 8.3 | 0.0058 | 2026-10-29 | A race condition in the account lockout mechanism in Delphix Continous Data allowed the lo | |
CVE-2026-59859 |
high | 8.7 | 0.0138 | 2026-10-29 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.4, Kiota's | |
CVE-2026-59860 |
high | 8.7 | 0.0138 | 2026-10-29 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.3, Kiota is | |
CVE-2026-59861 |
high | 7.5 | 0.0205 | 2026-10-29 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.0, Kiota's | |
CVE-2026-59862 |
high | 7.5 | 0.0138 | 2026-10-29 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.0, Kiota's | |
CVE-2026-59863 |
high | 7.0 | 0.0137 | 2026-10-29 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, Kiota ho | |
CVE-2026-53597 |
high | 8.7 | 0.0097 | 2026-10-29 | Prompty is a markdown file format (.prompty) for LLM prompts. From 2.0.0-alpha.1 until 2.0 | |
CVE-2026-53598 |
high | 7.5 | 0.0129 | 2026-10-29 | Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 2.0.0-beta.2, Promp | |
CVE-2026-57206 |
high | 8.6 | 0.0096 | 2026-10-29 | SimpleChat is a secure AI conversation application with personal and group workspaces for | |
CVE-2026-59867 |
high | 7.1 | 0.0239 | 2026-10-29 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, Kiota re | |
CVE-2026-13103 |
high | 7.0 | 0.0018 | 2026-10-29 | A potential path traversal vulnerability was reported in Lenovo App Store, distributed exc | |
CVE-2026-13104 |
high | 7.0 | 0.0016 | 2026-10-29 | A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the | |
CVE-2026-13397 |
high | 7.5 | 0.0061 | 2026-10-29 | HTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malfo | |
CVE-2026-13401 |
high | 7.5 | 0.0061 | 2026-10-29 | XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malfor |