Browse All CVEs
10,417 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-7669 |
medium | 6.3 | 0.0037 | 2026-10-29 | A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function g | |
CVE-2026-7670 |
medium | 5.5 | 0.0026 | 2026-10-29 | A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the | |
CVE-2026-40561 |
medium | 5.3 | 0.0036 | 2026-10-29 | Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header P | |
CVE-2026-7679 |
medium | 5.5 | 0.0042 | 2026-10-29 | A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the | |
CVE-2026-7681 |
medium | 5.5 | 0.0046 | 2026-10-29 | A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affecte | |
CVE-2026-7686 |
medium | 5.5 | 0.0036 | 2026-10-29 | A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vu | |
CVE-2026-7694 |
medium | 5.5 | 0.0032 | 2026-10-29 | A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Man | |
CVE-2026-7695 |
medium | 5.5 | 0.0034 | 2026-10-29 | A vulnerability has been found in Acrel Electrical EEMS Enterprise Power Operation and Mai | |
CVE-2026-7698 |
medium | 5.5 | 0.0272 | 2026-10-29 | A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affe | |
CVE-2026-7702 |
medium | 5.5 | 0.0031 | 2026-10-29 | A vulnerability was detected in toeverything AFFiNE up to 0.26.3. This issue affects the f | |
CVE-2026-7703 |
medium | 5.5 | 0.0031 | 2026-10-29 | A flaw has been found in AV Stumpfl Pixera Two Media Server up to 25.2 R2. Impacted is an | |
CVE-2026-6948 |
medium | 4.9 | 0.0034 | 2026-10-29 | Velociraptor versions prior to 0.76.4 contain a resource exhaustion vulnerability in the s | |
CVE-2026-7710 |
medium | 5.5 | 0.0040 | 2026-10-29 | A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the fu | |
CVE-2026-42366 |
medium | 6.1 | 0.0021 | 2026-10-29 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / | |
CVE-2026-42367 |
medium | 6.5 | 0.0028 | 2026-10-29 | A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality o | |
CVE-2026-7371 |
medium | 6.1 | 0.0021 | 2026-10-29 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / | |
CVE-2026-7714 |
medium | 5.5 | 0.0046 | 2026-10-29 | A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by thi | |
CVE-2026-7722 |
medium | 5.5 | 0.0045 | 2026-10-29 | A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function | |
CVE-2026-7723 |
medium | 5.5 | 0.0042 | 2026-10-29 | A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function o | |
CVE-2026-7727 |
medium | 6.9 | 0.0026 | 2026-10-29 | A vulnerability was determined in Shandong Hoteam Software PDM Product Data Management Sys | |
CVE-2026-7734 |
medium | 6.9 | 0.0046 | 2026-10-29 | A vulnerability has been found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3 | |
CVE-2026-7735 |
medium | 6.9 | 0.0036 | 2026-10-29 | A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttribut | |
CVE-2026-20447 |
medium | 6.7 | 0.0011 | 2026-10-29 | In geniezone, there is a possible escalation of privilege due to a missing bounds check. T | |
CVE-2026-20448 |
medium | 6.7 | 0.0015 | 2026-10-29 | In geniezone, there is a possible escalation of privilege due to a missing permission chec | |
CVE-2026-20449 |
medium | 6.5 | 0.0022 | 2026-10-29 | In Modem, there is a possible system crash due to a heap buffer overflow. This could lead | |
CVE-2026-20450 |
medium | 6.5 | 0.0029 | 2026-10-29 | In Modem, there is a possible system crash due to incorrect error handling. This could lea | |
CVE-2026-20451 |
medium | 6.7 | 0.0015 | 2026-10-29 | In slbc, there is a possible out of bounds write due to type confusion. This could lead to | |
CVE-2026-7736 |
medium | 6.9 | 0.0045 | 2026-10-29 | A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability i | |
CVE-2026-7737 |
medium | 6.9 | 0.0063 | 2026-10-29 | A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the fu | |
CVE-2026-33857 |
medium | 5.3 | 0.0039 | 2026-10-29 | Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue aff | |
CVE-2026-34032 |
medium | 5.3 | 0.0049 | 2026-10-29 | Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This i | |
CVE-2026-33006 |
medium | 4.8 | 0.0056 | 2026-10-29 | A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Di | |
CVE-2026-33007 |
medium | 5.3 | 0.0051 | 2026-10-29 | A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earli | |
CVE-2026-33523 |
medium | 6.5 | 0.0044 | 2026-10-29 | HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untruste | |
CVE-2026-6500 |
medium | 4.8 | 0.0010 | 2026-10-29 | Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retr | |
CVE-2026-6501 |
medium | 5.3 | 0.0023 | 2026-10-29 | Improper restriction of XML external entity reference vulnerability in ILM Informatique jO | |
CVE-2026-42077 |
medium | 5.2 | 0.0016 | 2026-10-29 | Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a pr | |
CVE-2026-42078 |
medium | 4.6 | 0.0020 | 2026-10-29 | PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418 | |
CVE-2026-42080 |
medium | 4.6 | 0.0020 | 2026-10-29 | PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418 | |
CVE-2026-41572 |
medium | 5.3 | 0.0024 | 2026-10-29 | Note Mark is an open-source note-taking application. Prior to version 0.19.3, after a note | |
CVE-2026-42052 |
medium | 6.0 | 0.0030 | 2026-10-29 | Beets is the media library management system. Prior to version 2.10.0, the bundled web UI | |
CVE-2026-42085 |
medium | 4.3 | 0.0031 | 2026-10-29 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from | |
CVE-2026-42086 |
medium | 4.6 | 0.0020 | 2026-10-29 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from | |
CVE-2026-42091 |
medium | 6.5 | 0.0016 | 2026-10-29 | goshs is a SimpleHTTPServer written in Go. Prior to version 2.0.2, the PUT upload handler | |
CVE-2026-42092 |
medium | 6.5 | 0.0022 | 2026-10-29 | titra is an open source time tracking project. In version 0.99.52, the globalsettings Mete | |
CVE-2026-42138 |
medium | 6.9 | 0.0024 | 2026-10-29 | Dify is an open-source LLM app development platform. Prior to version 1.13.1, using the me | |
CVE-2026-42140 |
medium | 4.4 | 0.0018 | 2026-10-29 | PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes. Prior to | |
CVE-2026-42144 |
medium | 6.1 | 0.0014 | 2026-10-29 | CImg Library is a C++ library for image processing. Prior to commit 4ca26bc, there is an i | |
CVE-2026-42146 |
medium | 5.5 | 0.0018 | 2026-10-29 | CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nb_colors | |
CVE-2026-43616 |
medium | 6.8 | 0.0017 | 2026-10-29 | Detect-It-Easy prior to 3.21 contains a path traversal vulnerability that allows attackers |