Browse All CVEs
50,446 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-86005 |
critical | 9.3 | 0.0047 | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and API | |
CVE-2026-85736 |
high | 8.1 | 0.0020 | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and API | |
CVE-2026-85726 |
high | 7.5 | 0.0031 | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and API | |
CVE-2026-85712 |
high | 8.8 | 0.0037 | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and API | |
CVE-2026-85708 |
high | 7.5 | 0.0019 | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and API | |
CVE-2026-85295 |
critical | 9.8 | 0.0040 | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and API | |
CVE-2026-71863 |
low | 2.6 | 0.0021 | 2026-11-06 | SecureDrop is an open-source whistleblower submission system that media organizations can | |
CVE-2026-71397 |
high | 8.2 | 0.0032 | 2026-11-06 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_ser | |
CVE-2026-54589 |
high | 7.0 | 0.0034 | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and API | |
CVE-2026-54349 |
critical | 9.8 | 0.0043 | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and API | |
CVE-2026-123787 |
low | 2.1 | 0.0034 | 2026-11-06 | A weakness has been identified in nexmoe VidBee up to 1.3.13/2.0.2. The affected element i | |
CVE-2026-102610 |
medium | 6.4 | 0.0029 | 2026-11-06 | fast-agent is a framework for building, running, and evaluating AI agents with Model Conte | |
CVE-2023-40661 |
medium | 6.4 | 0.0132 | 2026-11-06 | Several memory vulnerabilities were identified within the OpenSC packages, particularly in | |
CVE-2023-40660 |
medium | 6.6 | 0.0104 | 2026-11-06 | A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card i | |
CVE-2023-34968 |
medium | 5.3 | 0.0133 | 2026-11-06 | A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Sam | |
CVE-2023-34967 |
medium | 5.3 | 0.6120 | 2026-11-06 | A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When | |
CVE-2023-33952 |
medium | 6.7 | 0.0046 | 2026-11-06 | A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx | |
CVE-2023-33951 |
medium | 5.3 | 0.0034 | 2026-11-06 | A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The fla | |
CVE-2025-54991 |
medium | 5.5 | 0.0019 | 2026-11-06 | JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6. | |
CVE-2026-101547 |
medium | 6.1 | 0.0013 | 2026-11-06 | Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Int | |
CVE-2024-6655 |
high | 7.0 | 0.0047 | 2026-11-06 | A flaw was found in the GTK library. Under certain conditions, it is possible for a librar | |
CVE-2024-6239 |
high | 7.5 | 0.0078 | 2026-11-06 | A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests par | |
CVE-2024-6237 |
medium | 6.5 | 0.0092 | 2026-11-06 | A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to | |
CVE-2026-86044 |
critical | 9.6 | 0.0031 | 2026-11-06 | JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6. | |
CVE-2026-102530 |
critical | 9.4 | 0.0042 | 2026-11-06 | JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6. | |
CVE-2025-55002 |
medium | 5.5 | 0.0021 | 2026-11-06 | JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6. | |
CVE-2026-102344 |
high | 8.1 | 0.0015 | 2026-11-06 | Lavish is the new editor for your HTML artifacts. Prior to 0.1.43, the lavish-axi loopback | |
CVE-2026-124078 |
high | 8.7 | 0.0036 | 2026-11-06 | plist.js (npm package 'plist') before 5.0.1 contains an uncontrolled resource consumption | |
CVE-2026-102657 |
high | 7.5 | 0.0072 | 2026-11-06 | esm.sh is a no-build content delivery network (CDN) for web development. Prior to server v | |
CVE-2026-101532 |
high | 7.2 | 0.0046 | 2026-11-06 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All | |
CVE-2026-63437 |
medium | 6.5 | 0.0035 | 2026-11-06 | 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their | |
CVE-2026-59171 |
medium | 5.9 | 0.0055 | 2026-11-06 | JSON-java is a reference implementation of a JSON package in Java. From version 20150729 t | |
CVE-2026-101533 |
medium | 6.6 | 0.0028 | 2026-11-06 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All | |
CVE-2026-101519 |
high | 7.2 | 0.0046 | 2026-11-06 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All | |
CVE-2024-6387 |
high | 8.1 | 0.9951 | 2026-11-06 | 97 PoC | A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is |
CVE-2023-32256 |
high | 7.5 | 0.0062 | 2026-11-06 | A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 clos | |
CVE-2026-85737 |
medium | 6.5 | 0.0024 | 2026-11-06 | Velociraptor is a tool for collecting host-based state information using Velociraptor Quer | |
CVE-2026-63441 |
medium | 4.9 | 0.0031 | 2026-11-06 | 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their | |
CVE-2026-63440 |
medium | 5.9 | 0.0020 | 2026-11-06 | 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their | |
CVE-2026-63439 |
critical | 9.8 | 0.0041 | 2026-11-06 | 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their | |
CVE-2026-63438 |
critical | 9.8 | 0.0050 | 2026-11-06 | 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their | |
CVE-2026-73860 |
medium | 5.4 | 0.0013 | 2026-11-06 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-18107 | |
CVE-2026-65960 |
high | 8.8 | 0.0014 | 2026-11-06 | Tetragon is an eBPF-based security observability and runtime enforcement project. Versions | |
CVE-2026-63664 |
medium | 6.5 | 0.0023 | 2026-11-06 | CloudBeaver is a cloud database manager. In versions up to and including 26.1.1, some serv | |
CVE-2026-63663 |
medium | 6.5 | 0.0032 | 2026-11-06 | CloudBeaver is a cloud database manager. From version 23.2.3 until 26.1.2, a path traversa | |
CVE-2026-58490 |
critical | 9.8 | 0.0034 | 2026-11-06 | Tracecat is an open-source security automation platform for teams and AI agents. From vers | |
CVE-2026-55449 |
medium | 5.3 | 0.0031 | 2026-11-06 | CloudBeaver is a cloud database manager. Prior to 26.1.2, its resource-management project | |
CVE-2026-101534 |
high | 8.5 | 0.0021 | 2026-11-06 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI | |
CVE-2026-101527 |
high | 7.8 | 0.0014 | 2026-11-06 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise | |
CVE-2026-101511 |
medium | 4.3 | 0.0029 | 2026-11-06 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise |