Browse All CVEs
13,207 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-55677 |
high | 7.5 | 0.0052 | 2026-10-29 | Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handl | |
CVE-2026-56663 |
high | 8.5 | 0.0028 | 2026-10-29 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous | |
CVE-2026-57231 |
high | 7.5 | 0.0044 | 2026-10-29 | Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container | |
CVE-2026-47204 |
high | 7.5 | 0.0045 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-47221 |
high | 7.5 | 0.0044 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-48042 |
high | 7.5 | 0.0056 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Pri | |
CVE-2026-48044 |
high | 7.5 | 0.0049 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-48497 |
high | 7.5 | 0.0040 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Pri | |
CVE-2026-48706 |
high | 7.5 | 0.0061 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-48743 |
high | 7.5 | 0.0030 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Pri | |
CVE-2026-54341 |
high | 7.5 | 0.0050 | 2026-10-29 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39 | |
CVE-2026-55441 |
high | 8.6 | 0.0018 | 2026-10-29 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's | |
CVE-2026-56876 |
high | 8.6 | 0.0053 | 2026-10-29 | extract-zip does not validate symlink targets when extracting zip archives. When processin | |
CVE-2026-13372 |
high | 7.2 | 0.0050 | 2026-10-29 | Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutio | |
CVE-2026-32833 |
high | 8.7 | 0.0242 | 2026-10-29 | Cudy LT300 3.0 running firmware prior to version 2.5.12 contains an OS command injection v | |
CVE-2026-47193 |
high | 7.5 | 0.0031 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17. | |
CVE-2026-52783 |
high | 8.2 | 0.0020 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17. | |
CVE-2026-52784 |
high | 8.8 | 0.0024 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17. | |
CVE-2026-46604 |
high | 7.5 | 0.0061 | 2026-10-29 | The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offs | |
CVE-2026-36478 |
high | 7.5 | 0.0055 | 2026-10-29 | An issue in Technitium DNS Server v.14.3 and before allows a remote attacker to cause a de | |
CVE-2026-45807 |
high | 7.7 | 0.0057 | 2026-10-29 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.43 and 1.3.19, | |
CVE-2026-55069 |
high | 8.7 | 0.0024 | 2026-10-29 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulne | |
CVE-2026-55975 |
high | 8.6 | 0.0063 | 2026-10-29 | A vulnerability exists in H.View IP cameras that could allow an authenticated user to supp | |
CVE-2026-56414 |
high | 8.6 | 0.0039 | 2026-10-29 | A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow au | |
CVE-2023-37524 |
high | 7.8 | 0.0027 | 2026-10-29 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Fr | |
CVE-2026-10643 |
high | 7.8 | 0.0016 | 2026-10-29 | Zephyr's IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert | |
CVE-2026-58050 |
high | 8.3 | 0.0044 | 2026-10-29 | libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publicke | |
CVE-2026-58051 |
high | 8.3 | 0.0028 | 2026-10-29 | libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initia | |
CVE-2026-58056 |
high | 7.2 | 0.0033 | 2026-10-29 | RustDesk gates incoming control messages on per-capability flags rather than on the sessio | |
CVE-2026-10646 |
high | 7.4 | 0.0045 | 2026-10-29 | Zephyr's BSD-sockets getaddrinfo() implementation (subsys/net/lib/sockets/getaddrinfo.c) p | |
CVE-2026-49048 |
high | 8.7 | 0.0056 | 2026-10-29 | The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL stat | |
CVE-2026-13515 |
high | 7.4 | 0.0085 | 2026-10-29 | A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the fun | |
CVE-2026-13516 |
high | 7.4 | 0.0085 | 2026-10-29 | A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the funct | |
CVE-2026-13517 |
high | 7.4 | 0.0085 | 2026-10-29 | A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the function for | |
CVE-2026-13518 |
high | 7.4 | 0.0085 | 2026-10-29 | A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromA | |
CVE-2026-13519 |
high | 7.4 | 0.0085 | 2026-10-29 | A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function fromNatSta | |
CVE-2026-13539 |
high | 7.4 | 0.0085 | 2026-10-29 | A vulnerability was identified in Wavlink WL-NU516U1-A M16U1_V240425. The impacted element | |
CVE-2026-13545 |
high | 7.4 | 0.0554 | 2026-10-29 | A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub_4 | |
CVE-2026-22078 |
high | 7.3 | 0.0012 | 2026-10-29 | Because O+ Connect's IPC service does not authenticate clients, external applications can | |
CVE-2026-25707 |
high | 8.8 | 0.0060 | 2026-10-29 | A relative path traversal bug problem when processing repository metadata in libzypp befor | |
CVE-2026-57346 |
high | 7.1 | 0.0041 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-13562 |
high | 7.4 | 0.0080 | 2026-10-29 | A flaw has been found in Edimax EW-7478APC 1.04. This affects the function formiNICSiteSur | |
CVE-2026-13563 |
high | 7.4 | 0.0080 | 2026-10-29 | A vulnerability has been found in Edimax EW-7478APC 1.04. This impacts the function formL2 | |
CVE-2026-13564 |
high | 7.4 | 0.0080 | 2026-10-29 | A vulnerability was found in Edimax EW-7478APC 1.04. Affected is the function formPPPoESet | |
CVE-2026-13165 |
high | 8.6 | 0.0071 | 2026-10-29 | SzafirHost verifies the downloaded native library archive with one JarFile parser (reading | |
CVE-2026-40521 |
high | 8.7 | 0.0098 | 2026-10-29 | FrontAccounting before 2.4.20 contains a path traversal vulnerability in the attachment up | |
CVE-2026-40522 |
high | 7.1 | 0.0023 | 2026-10-29 | FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Bank Statement | |
CVE-2026-40524 |
high | 7.2 | 0.0034 | 2026-10-29 | FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the get_gl_transac | |
CVE-2026-54369 |
high | 8.4 | 0.0015 | 2026-10-29 | acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname | |
CVE-2026-54370 |
high | 7.2 | 0.0009 | 2026-10-29 | acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition v |