Browse All CVEs
9,222 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-35598 |
medium | 4.3 | 0.0022 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV | |
CVE-2026-35599 |
medium | 6.5 | 0.0035 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the addRep | |
CVE-2026-35600 |
medium | 5.4 | 0.0019 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, task title | |
CVE-2026-35601 |
medium | 4.1 | 0.0020 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV | |
CVE-2026-40074 |
medium | 6.3 | 0.0037 | 2026-10-29 | SvelteKit is a framework for rapidly developing robust, performant web applications using | |
CVE-2026-40086 |
medium | 5.3 | 0.0059 | 2026-10-29 | Rembg is a tool to remove images background. Prior to 2.0.75, a path traversal vulnerabili | |
CVE-2026-40100 |
medium | 5.3 | 0.0025 | 2026-10-29 | FastGPT is an AI Agent building platform. Prior to 4.14.10.3, the /api/core/app/mcpTools/r | |
CVE-2026-40103 |
medium | 5.4 | 0.0022 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's | |
CVE-2026-40159 |
medium | 5.5 | 0.0018 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI’s MCP (Model Context | |
CVE-2026-1502 |
medium | 5.7 | 0.0056 | 2026-10-29 | CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. | |
CVE-2026-31941 |
medium | 6.5 | 0.0023 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, Chamilo LMS | |
CVE-2026-32893 |
medium | 5.4 | 0.0014 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, a Reflected Cross-Site S | |
CVE-2026-32932 |
medium | 6.1 | 0.0018 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Open Redi | |
CVE-2026-33141 |
medium | 6.5 | 0.0014 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, an Insecure Direct Objec | |
CVE-2026-27460 |
medium | 6.5 | 0.0030 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-33705 |
medium | 5.3 | 0.0024 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38, Twig template files (.tpl) | |
CVE-2026-33708 |
medium | 6.5 | 0.0021 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38, the get_user_info_from_user | |
CVE-2026-33736 |
medium | 6.5 | 0.0021 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, any authenticated user ( | |
CVE-2026-33737 |
medium | 6.5 | 0.0022 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, multiple fil | |
CVE-2026-3446 |
medium | 6.0 | 0.0019 | 2026-10-29 | When calling base64.b64decode() or related functions the decoding process would stop after | |
CVE-2026-40184 |
medium | 5.3 | 0.0024 | 2026-10-29 | TREK is a collaborative travel planner. Prior to 2.7.2, TREK served uploaded photos withou | |
CVE-2026-40185 |
medium | 6.5 | 0.0021 | 2026-10-29 | TREK is a collaborative travel planner. Prior to 2.7.2, TREK was missing authorization che | |
CVE-2026-40191 |
medium | 6.8 | 0.0011 | 2026-10-29 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access | |
CVE-2026-40242 |
medium | 6.5 | 0.0062 | 2026-10-29 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prio | |
CVE-2026-40252 |
medium | 5.3 | 0.0034 | 2026-10-29 | FastGPT is an AI Agent building platform. Prior to 4.14.10.4, Broken Access Control vulner | |
CVE-2026-33118 |
medium | 4.3 | 0.0056 | 2026-10-29 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium- | |
CVE-2026-33119 |
medium | 5.4 | 0.0031 | 2026-10-29 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium- | |
CVE-2026-40199 |
medium | 6.5 | 0.0031 | 2026-10-29 | Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which | |
CVE-2026-40354 |
medium | 6.3 | 0.0013 | 2026-10-29 | Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app t | |
CVE-2026-23900 |
medium | 6.5 | 0.0025 | 2026-10-29 | Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps com | |
CVE-2026-6105 |
medium | 5.5 | 0.0031 | 2026-10-29 | A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7. This aff | |
CVE-2026-6107 |
medium | 5.1 | 0.0021 | 2026-10-29 | A flaw has been found in 1Panel-dev MaxKB up to 2.6.1. This issue affects some unknown pro | |
CVE-2026-1116 |
medium | 6.1 | 0.0026 | 2026-10-29 | A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the | |
CVE-2026-6110 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1. This affects the f | |
CVE-2026-6126 |
medium | 5.5 | 0.0040 | 2026-10-29 | A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4. The affected | |
CVE-2026-6129 |
medium | 5.5 | 0.0039 | 2026-10-29 | A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affe | |
CVE-2026-6130 |
medium | 5.5 | 0.0150 | 2026-10-29 | A flaw has been found in chatboxai chatbox up to 1.20.0. This impacts the function StdioCl | |
CVE-2026-6142 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was identified in tushar-2223 Hotel Management System up to bb1f3b3666124b | |
CVE-2026-6148 |
medium | 5.5 | 0.0038 | 2026-10-29 | A vulnerability was detected in code-projects Vehicle Showroom Management System 1.0. Affe | |
CVE-2026-6149 |
medium | 5.5 | 0.0035 | 2026-10-29 | A flaw has been found in code-projects Vehicle Showroom Management System 1.0. Affected by | |
CVE-2026-6151 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. This vu | |
CVE-2026-6152 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was determined in code-projects Vehicle Showroom Management System 1.0. Th | |
CVE-2026-6179 |
medium | 6.3 | 0.0017 | 2026-10-29 | Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigge | |
CVE-2026-34850 |
medium | 5.9 | 0.0016 | 2026-10-29 | Race condition vulnerability in the notification service. Impact: Successful exploitation | |
CVE-2026-34852 |
medium | 6.5 | 0.0016 | 2026-10-29 | Stack overflow vulnerability in the media platform. Impact: Successful exploitation of thi | |
CVE-2026-34860 |
medium | 6.5 | 0.0014 | 2026-10-29 | Access control vulnerability in the memo module. Impact: Successful exploitation of this v | |
CVE-2026-34867 |
medium | 5.6 | 0.0009 | 2026-10-29 | Double free vulnerability in the multi-mode input system. Impact: Successful exploitation | |
CVE-2026-6153 |
medium | 5.5 | 0.0032 | 2026-10-29 | A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0. Im | |
CVE-2026-21003 |
medium | 5.2 | 0.0016 | 2026-10-29 | Improper input validation in data related to network restrictions prior to SMR Apr-2026 Re | |
CVE-2026-34849 |
medium | 4.7 | 0.0008 | 2026-10-29 | UAF vulnerability in the screen management module. Impact: Successful exploitation of this |