Browse All CVEs
9,357 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-33978 |
medium | 6.1 | 0.0029 | 2026-10-29 | Notesnook is a note-taking app focused on user privacy & ease of use. Prior to version 3.3 | |
CVE-2026-33990 |
medium | 6.8 | 0.0026 | 2026-10-29 | Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Dock | |
CVE-2026-34749 |
medium | 5.4 | 0.0013 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34750 |
medium | 6.5 | 0.0036 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-5311 |
medium | 5.5 | 0.0103 | 2026-10-29 | A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-32 | |
CVE-2026-1491 |
medium | 5.3 | 0.0039 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-22815 |
medium | 6.9 | 0.0046 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-2475 |
medium | 4.7 | 0.0026 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-2862 |
medium | 5.3 | 0.0039 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-34515 |
medium | 6.6 | 0.0045 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34516 |
medium | 6.6 | 0.0046 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34525 |
medium | 6.3 | 0.0030 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-4364 |
medium | 5.4 | 0.0009 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-4820 |
medium | 4.3 | 0.0012 | 2026-10-29 | IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on | |
CVE-2026-5312 |
medium | 5.5 | 0.0055 | 2026-10-29 | A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, D | |
CVE-2026-1243 |
medium | 5.4 | 0.0021 | 2026-10-29 | IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This | |
CVE-2026-5322 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd | |
CVE-2026-5244 |
medium | 5.5 | 0.0073 | 2026-10-29 | A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function m | |
CVE-2026-29131 |
medium | 4.9 | 0.0023 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially craf | |
CVE-2026-29132 |
medium | 6.3 | 0.0025 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a vi | |
CVE-2026-29133 |
medium | 5.3 | 0.0023 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys | |
CVE-2026-29134 |
medium | 5.3 | 0.0022 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA | |
CVE-2026-29135 |
medium | 5.3 | 0.0025 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password | |
CVE-2026-29136 |
medium | 5.3 | 0.0010 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into | |
CVE-2026-29137 |
medium | 5.3 | 0.0019 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security ta | |
CVE-2026-29138 |
medium | 6.3 | 0.0022 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially craf | |
CVE-2026-29142 |
medium | 6.3 | 0.0013 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-enc | |
CVE-2026-33617 |
medium | 5.3 | 0.0027 | 2026-10-29 | An unauthenticated remote attacker can access a configuration file containing database cre | |
CVE-2026-5326 |
medium | 5.5 | 0.0040 | 2026-10-29 | A vulnerability was identified in SourceCodester Leave Application System 1.0. Impacted is | |
CVE-2026-34890 |
medium | 6.5 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-4325 |
medium | 5.3 | 0.0025 | 2026-10-29 | A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks | |
CVE-2026-5330 |
medium | 5.5 | 0.0031 | 2026-10-29 | A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0. A | |
CVE-2026-26927 |
medium | 5.1 | 0.0027 | 2026-10-29 | Szafir SDK Web is a browser plug-in that can run SzafirHost application which download the | |
CVE-2026-30867 |
medium | 6.5 | 0.0032 | 2026-10-29 | CocoaMQTT is a MQTT 5.0 client library for iOS and macOS written in Swift. Prior to versio | |
CVE-2026-5333 |
medium | 5.5 | 0.0293 | 2026-10-29 | A security flaw has been discovered in DefaultFuction Content-Management-System 1.0. This | |
CVE-2026-5334 |
medium | 5.5 | 0.0037 | 2026-10-29 | A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is a | |
CVE-2026-32629 |
medium | 5.4 | 0.0026 | 2026-10-29 | phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, an unauthenticated | |
CVE-2026-34729 |
medium | 4.8 | 0.0024 | 2026-10-29 | phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, there is a stored | |
CVE-2026-28736 |
medium | 4.3 | 0.0022 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to validate file ownership wh | |
CVE-2026-37977 |
medium | 5.3 | 0.0025 | 2026-10-29 | A flaw was found in Keycloak. A remote attacker can exploit a Cross-Origin Resource Sharin | |
CVE-2026-5637 |
medium | 5.5 | 0.0026 | 2026-10-29 | A security vulnerability has been detected in projectworlds Car Rental System 1.0. This vu | |
CVE-2026-5638 |
medium | 5.5 | 0.0049 | 2026-10-29 | A vulnerability was detected in HerikLyma CPPWebFramework up to 3.1. This issue affects so | |
CVE-2026-5642 |
medium | 5.5 | 0.0028 | 2026-10-29 | A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f73 | |
CVE-2026-5645 |
medium | 5.5 | 0.0027 | 2026-10-29 | A weakness has been identified in projectworlds Car Rental System 1.0. Affected by this vu | |
CVE-2026-5646 |
medium | 5.5 | 0.0032 | 2026-10-29 | A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected b | |
CVE-2026-5648 |
medium | 5.5 | 0.0026 | 2026-10-29 | A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affec | |
CVE-2026-5650 |
medium | 5.5 | 0.0031 | 2026-10-29 | A vulnerability was found in code-projects Online Application System for Admission 1.0. Im | |
CVE-2026-25932 |
medium | 4.8 | 0.0028 | 2026-10-29 | GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an a | |
CVE-2026-33403 |
medium | 6.1 | 0.0019 | 2026-10-29 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and in | |
CVE-2026-33404 |
medium | 6.1 | 0.0014 | 2026-10-29 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and in |