Browse All CVEs
9,470 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-32990 |
medium | 5.3 | 0.0031 | 2026-10-29 | Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2 | |
CVE-2026-34500 |
medium | 6.5 | 0.0045 | 2026-10-29 | CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is | |
CVE-2026-40087 |
medium | 5.3 | 0.0026 | 2026-10-29 | LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.84 | |
CVE-2026-5972 |
medium | 5.5 | 0.0256 | 2026-10-29 | A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects | |
CVE-2026-5973 |
medium | 5.5 | 0.0251 | 2026-10-29 | A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the functio | |
CVE-2026-5974 |
medium | 6.9 | 0.0246 | 2026-10-29 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected eleme | |
CVE-2026-21904 |
medium | 5.1 | 0.0021 | 2026-10-29 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vu | |
CVE-2026-33773 |
medium | 6.9 | 0.0020 | 2026-10-29 | An Incorrect Initialization of Resource vulnerability in the packet forwarding engine (pfe | |
CVE-2026-33774 |
medium | 6.9 | 0.0017 | 2026-10-29 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwar | |
CVE-2026-33776 |
medium | 6.8 | 0.0009 | 2026-10-29 | A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS | |
CVE-2026-33785 |
medium | 6.3 | 0.0014 | 2026-10-29 | A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series | |
CVE-2026-33786 |
medium | 6.8 | 0.0009 | 2026-10-29 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis contr | |
CVE-2026-33787 |
medium | 6.8 | 0.0009 | 2026-10-29 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis contr | |
CVE-2026-39848 |
medium | 5.4 | 0.0011 | 2026-10-29 | Dockyard is a Docker container management app. Prior to 1.1.0, Docker container start and | |
CVE-2026-40112 |
medium | 6.1 | 0.0022 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, the Flask API endpoint in src/p | |
CVE-2026-40148 |
medium | 6.5 | 0.0024 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, the _safe_extractall() function | |
CVE-2026-40150 |
medium | 6.5 | 0.0027 | 2026-10-29 | PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the web_crawl() function | |
CVE-2026-40151 |
medium | 5.3 | 0.0076 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, the AgentOS deployment platform | |
CVE-2026-40152 |
medium | 5.3 | 0.0040 | 2026-10-29 | PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he list_files() tool in F | |
CVE-2026-40153 |
medium | 6.5 | 0.0027 | 2026-10-29 | PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the execute_command funct | |
CVE-2026-5985 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security flaw has been discovered in code-projects Simple IT Discussion Forum 1.0. The a | |
CVE-2026-5986 |
medium | 5.5 | 0.0037 | 2026-10-29 | A weakness has been identified in Zod jsVideoUrlParser up to 0.5.1. The impacted element i | |
CVE-2026-5998 |
medium | 5.5 | 0.0063 | 2026-10-29 | A flaw has been found in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects the | |
CVE-2026-33551 |
medium | 5.3 | 0.0022 | 2026-10-29 | An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, | |
CVE-2026-6004 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was detected in code-projects Simple IT Discussion Forum 1.0. Impacted is | |
CVE-2026-4482 |
medium | 6.8 | 0.0008 | 2026-10-29 | The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have r | |
CVE-2026-6024 |
medium | 5.5 | 0.0069 | 2026-10-29 | A vulnerability was determined in Tenda i6 1.0.0.7(2204). Affected by this issue is the fu | |
CVE-2026-40212 |
medium | 5.4 | 0.0022 | 2026-10-29 | OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS | |
CVE-2026-6031 |
medium | 5.5 | 0.0037 | 2026-10-29 | A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. This affec | |
CVE-2026-33455 |
medium | 5.3 | 0.0018 | 2026-10-29 | Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authentic | |
CVE-2026-33456 |
medium | 5.1 | 0.0020 | 2026-10-29 | Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allow | |
CVE-2026-33457 |
medium | 5.3 | 0.0018 | 2026-10-29 | Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3 | |
CVE-2026-6036 |
medium | 5.5 | 0.0032 | 2026-10-29 | A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. The imp | |
CVE-2026-6037 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was determined in code-projects Vehicle Showroom Management System 1.0. Th | |
CVE-2026-6038 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0. Th | |
CVE-2026-6042 |
medium | 4.8 | 0.0024 | 2026-10-29 | A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function ico | |
CVE-2026-5412 |
medium | 6.5 | 0.0044 | 2026-10-29 | In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controll | |
CVE-2026-5774 |
medium | 6.0 | 0.0024 | 2026-10-29 | Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, | |
CVE-2026-29043 |
medium | 5.5 | 0.0021 | 2026-10-29 | HDF5 is software for managing data. In 1.14.1-2 and earlier, an attacker who can control a | |
CVE-2026-34477 |
medium | 6.3 | 0.0056 | 2026-10-29 | The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was i | |
CVE-2026-34478 |
medium | 6.9 | 0.0097 | 2026-10-29 | Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.htm | |
CVE-2026-34479 |
medium | 6.9 | 0.0053 | 2026-10-29 | The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters f | |
CVE-2026-34480 |
medium | 6.9 | 0.0105 | 2026-10-29 | Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.html#Xm | |
CVE-2026-34481 |
medium | 6.3 | 0.0069 | 2026-10-29 | Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-templa | |
CVE-2026-35594 |
medium | 6.5 | 0.0031 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's | |
CVE-2026-40021 |
medium | 6.3 | 0.0077 | 2026-10-29 | Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layout | |
CVE-2026-40023 |
medium | 6.3 | 0.0050 | 2026-10-29 | Apache Log4cxx's XMLLayout https://logging.apache.org/log4cxx/1.7.0/classlog4cxx_1_1xml_1 | |
CVE-2026-35596 |
medium | 4.3 | 0.0027 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the hasAcc | |
CVE-2026-35598 |
medium | 4.3 | 0.0022 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV | |
CVE-2026-35599 |
medium | 6.5 | 0.0035 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the addRep |