Browse All CVEs
10,097 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-33989 |
medium | 6.5 | 0.0050 | 2026-10-29 | Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.4 | |
CVE-2026-4985 |
medium | 5.3 | 0.0050 | 2026-10-29 | A vulnerability was identified in dloebl CGIF up to 0.5.2. This vulnerability affects the | |
CVE-2026-33936 |
medium | 5.3 | 0.0049 | 2026-10-29 | The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptograp | |
CVE-2026-33993 |
medium | 6.9 | 0.0059 | 2026-10-29 | Locutus brings stdlibs of other programming languages to JavaScript for educational purpos | |
CVE-2026-33994 |
medium | 6.3 | 0.0057 | 2026-10-29 | Locutus brings stdlibs of other programming languages to JavaScript for educational purpos | |
CVE-2026-5147 |
medium | 6.9 | 0.0035 | 2026-10-29 | A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This affects an u | |
CVE-2026-5273 |
medium | 6.3 | 0.0036 | 2026-10-29 | Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker t | |
CVE-2026-5276 |
medium | 6.5 | 0.0025 | 2026-10-29 | Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed | |
CVE-2026-5283 |
medium | 6.5 | 0.0027 | 2026-10-29 | Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a r | |
CVE-2026-5291 |
medium | 6.5 | 0.0025 | 2026-10-29 | Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a r | |
CVE-2026-5256 |
medium | 5.5 | 0.0034 | 2026-10-29 | A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affec | |
CVE-2026-5257 |
medium | 5.5 | 0.0034 | 2026-10-29 | A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affe | |
CVE-2026-5258 |
medium | 5.5 | 0.0063 | 2026-10-29 | A vulnerability was found in Sanster IOPaint 1.5.3. Impacted is the function _get_file of | |
CVE-2026-34889 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-5261 |
medium | 5.5 | 0.0039 | 2026-10-29 | A vulnerability was identified in Shandong Hoteam InforCenter PLM up to 8.3.8. The impacte | |
CVE-2026-21629 |
medium | 6.3 | 0.0026 | 2026-10-29 | The ajax component was excluded from the default logged-in-user check in the administrativ | |
CVE-2026-21630 |
medium | 6.9 | 0.0035 | 2026-10-29 | Improperly built order clauses lead to a SQL injection vulnerability in the articles webse | |
CVE-2026-21631 |
medium | 5.9 | 0.0022 | 2026-10-29 | Lack of output escaping leads to a XSS vector in the multilingual associations component. | |
CVE-2026-21632 |
medium | 5.9 | 0.0019 | 2026-10-29 | Lack of output escaping for article titles leads to XSS vectors in various locations. | |
CVE-2026-0932 |
medium | 6.9 | 0.0020 | 2026-10-29 | Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of doc | |
CVE-2026-25601 |
medium | 6.7 | 0.0016 | 2026-10-29 | A vulnerability was identified in MEPIS RM, an industrial software product developed by Me | |
CVE-2026-34999 |
medium | 6.9 | 0.0043 | 2026-10-29 | OpenViking versions 0.2.5 prior to 0.2.14 contain a missing authentication vulnerability i | |
CVE-2026-35094 |
medium | 5.5 | 0.0015 | 2026-10-29 | A flaw was found in libinput. An attacker capable of deploying a Lua plugin file in specif | |
CVE-2026-5271 |
medium | 5.6 | 0.0018 | 2026-10-29 | pymanager included the current working directory in sys.path meaning modules could be shad | |
CVE-2026-4829 |
medium | 5.4 | 0.0017 | 2026-10-29 | Improper authentication in the external OAuth authentication flow in Devolutions Server 20 | |
CVE-2026-4925 |
medium | 5.0 | 0.0020 | 2026-10-29 | Improper access control in the users MFA feature in Devolutions Server allows an authentic | |
CVE-2026-4927 |
medium | 6.5 | 0.0023 | 2026-10-29 | Exposure of sensitive information in the users MFA feature in Devolutions Server allows us | |
CVE-2026-4989 |
medium | 4.3 | 0.0017 | 2026-10-29 | Improper input validation in the gateway health check feature in Devolutions Server allows | |
CVE-2026-5175 |
medium | 5.0 | 0.0026 | 2026-10-29 | Improper access control in the multi-factor authentication (MFA) management API in Devolut | |
CVE-2026-20041 |
medium | 6.1 | 0.0025 | 2026-10-29 | A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an | |
CVE-2026-20042 |
medium | 6.5 | 0.0031 | 2026-10-29 | A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow a | |
CVE-2026-20085 |
medium | 6.1 | 0.0019 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an unauthen | |
CVE-2026-20087 |
medium | 4.8 | 0.0018 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20088 |
medium | 4.8 | 0.0023 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20089 |
medium | 4.8 | 0.0025 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20090 |
medium | 4.8 | 0.0025 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20095 |
medium | 6.5 | 0.0095 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20096 |
medium | 6.5 | 0.0073 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20097 |
medium | 6.5 | 0.0041 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20174 |
medium | 4.9 | 0.0050 | 2026-10-29 | A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could all | |
CVE-2026-33978 |
medium | 6.1 | 0.0029 | 2026-10-29 | Notesnook is a note-taking app focused on user privacy & ease of use. Prior to version 3.3 | |
CVE-2026-33990 |
medium | 6.8 | 0.0026 | 2026-10-29 | Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Dock | |
CVE-2026-34749 |
medium | 5.4 | 0.0013 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34750 |
medium | 6.5 | 0.0036 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-5311 |
medium | 5.5 | 0.0103 | 2026-10-29 | A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-32 | |
CVE-2026-1491 |
medium | 5.3 | 0.0039 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-22815 |
medium | 6.9 | 0.0046 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-2475 |
medium | 4.7 | 0.0026 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-2862 |
medium | 5.3 | 0.0039 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-34515 |
medium | 6.6 | 0.0045 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v |