Browse All CVEs
13,216 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-46415 |
high | 8.2 | 0.0023 | 2026-10-29 | The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipula | |
CVE-2026-32806 |
high | 7.5 | 0.0039 | 2026-10-29 | dataCycle is a data management system for centrally storing, managing, searching, finding, | |
CVE-2026-32820 |
high | 7.5 | 0.0089 | 2026-10-29 | dataCycle is a data management system for centrally storing, managing, searching, finding, | |
CVE-2026-32821 |
high | 8.1 | 0.0035 | 2026-10-29 | dataCycle is a data management system for centrally storing, managing, searching, finding, | |
CVE-2026-32824 |
high | 7.3 | 0.0034 | 2026-10-29 | dataCycle is a data management system for centrally storing, managing, searching, finding, | |
CVE-2026-32825 |
high | 7.3 | 0.0034 | 2026-10-29 | dataCycle is a data management system for centrally storing, managing, searching, finding, | |
CVE-2026-39385 |
high | 7.1 | 0.0037 | 2026-10-29 | Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a | |
CVE-2026-44178 |
high | 8.8 | 0.0088 | 2026-10-29 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer o | |
CVE-2026-46555 |
high | 7.1 | 0.0021 | 2026-10-29 | WhatsApp MCP Server is a Model Context Protocol (MCP) server for WhatsApp, enabling Claude | |
CVE-2026-46701 |
high | 7.6 | 0.0021 | 2026-10-29 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.4.5, the M | |
CVE-2026-54538 |
high | 7.5 | 0.0067 | 2026-10-29 | xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered | |
CVE-2026-58484 |
high | 7.1 | 0.0020 | 2026-10-29 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `Env | |
CVE-2026-34239 |
high | 7.5 | 0.0046 | 2026-10-29 | Chamilo version 1.11.40 and earlier are vulnerable to authenticated remote code execution | |
CVE-2026-48812 |
high | 7.5 | 0.0047 | 2026-10-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior t | |
CVE-2026-55626 |
high | 7.3 | 0.0019 | 2026-10-29 | xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated use | |
CVE-2026-64612 |
high | 7.5 | 0.0070 | 2026-10-29 | A flaw was found in libcupsfilters and cups-filters. The PNG image reading function create | |
CVE-2026-8169 |
high | 8.7 | 0.0038 | 2026-10-29 | ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privilege | |
CVE-2026-8170 |
high | 8.7 | 0.0056 | 2026-10-29 | The mv, cp, and rm file utilities exposed within the ExtremeXOS (EXOS) shell environment f | |
CVE-2026-48389 |
high | 7.8 | 0.0034 | 2026-10-29 | DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vuln | |
CVE-2026-60026 |
high | 8.9 | 0.0053 | 2026-10-29 | Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Page Builder | |
CVE-2026-60027 |
high | 8.7 | 0.0052 | 2026-10-29 | Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Pag | |
CVE-2026-60028 |
high | 8.6 | 0.0042 | 2026-10-29 | Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 | |
CVE-2026-60030 |
high | 8.7 | 0.0041 | 2026-10-29 | Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Pag | |
CVE-2026-63108 |
high | 7.7 | 0.0177 | 2026-10-29 | Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve exe | |
CVE-2026-63770 |
high | 8.2 | 0.0029 | 2026-10-29 | Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication h | |
CVE-2026-64194 |
high | 7.5 | 0.0068 | 2026-10-29 | Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression p | |
CVE-2026-64619 |
high | 8.7 | 0.0029 | 2026-10-29 | FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class | |
CVE-2026-53591 |
high | 8.6 | 0.0027 | 2026-10-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior t | |
CVE-2026-53593 |
high | 8.8 | 0.0035 | 2026-10-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior t | |
CVE-2026-13381 |
high | 8.7 | 0.0037 | 2026-10-29 | VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulner | |
CVE-2026-47129 |
high | 8.1 | 0.0027 | 2026-10-29 | NextCRM is open-source customer relationship management (CRM) software. Versions prior to | |
CVE-2026-47130 |
high | 7.1 | 0.0020 | 2026-10-29 | NextCRM is open-source customer relationship management (CRM) software. Versions prior to | |
CVE-2026-56452 |
high | 7.5 | 0.0077 | 2026-10-29 | Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java l | |
CVE-2026-56623 |
high | 7.1 | 0.0087 | 2026-10-29 | Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Ja | |
CVE-2026-56624 |
high | 7.3 | 0.0029 | 2026-10-29 | Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a J | |
CVE-2024-51316 |
high | 7.5 | 0.0042 | 2026-10-29 | The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the update_de | |
CVE-2026-55544 |
high | 7.6 | 0.0022 | 2026-10-29 | NextCRM is open-source customer relationship management (CRM) software. In version 0.12.1, | |
CVE-2026-55550 |
high | 7.1 | 0.0023 | 2026-10-29 | NextCRM is open-source customer relationship management (CRM) software. The CRM product ca | |
CVE-2026-57494 |
high | 7.1 | 0.0027 | 2026-10-29 | AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api pr | |
CVE-2026-15902 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker | |
CVE-2026-15903 |
high | 8.8 | 0.0041 | 2026-10-29 | Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remo | |
CVE-2026-15904 |
high | 8.8 | 0.0034 | 2026-10-29 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote | |
CVE-2026-15905 |
high | 7.8 | 0.0014 | 2026-10-29 | Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker t | |
CVE-2026-6952 |
high | 7.2 | 0.0152 | 2026-10-29 | A post-authentication command injection vulnerability in the "LogServer" field of the sysl | |
CVE-2026-59776 |
high | 7.0 | 0.0017 | 2026-10-29 | Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipp | |
CVE-2026-3183 |
high | 7.1 | 0.0121 | 2026-10-29 | Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Fact | |
CVE-2026-60080 |
high | 7.3 | 0.0068 | 2026-10-29 | Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue | |
CVE-2026-65007 |
high | 8.7 | 0.0033 | 2026-10-29 | The Grav api plugin (grav-plugin-api) before 1.0.8 fails to properly authorize API key gen | |
CVE-2026-16354 |
high | 7.5 | 0.0046 | 2026-10-29 | Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed i | |
CVE-2026-16362 |
high | 8.8 | 0.0044 | 2026-10-29 | Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firef |