Browse All CVEs
13,193 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-55514 |
high | 7.1 | 0.0066 | 2026-10-29 | vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a p | |
CVE-2026-55574 |
high | 8.7 | 0.0058 | 2026-10-29 | vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prio | |
CVE-2026-55727 |
high | 7.5 | 0.0050 | 2026-10-29 | A flaw in the authentication mechanism for video stream requests in Genetec Security Cente | |
CVE-2026-57573 |
high | 8.6 | 0.0044 | 2026-10-29 | Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docke | |
CVE-2026-59712 |
high | 8.6 | 0.0045 | 2026-10-29 | Leantime's Users::getUser method in the JSON-RPC API lacks proper authorization checks, al | |
CVE-2026-59713 |
high | 8.6 | 0.0023 | 2026-10-29 | Leantime contains an OIDC login CSRF vulnerability in the verifyState() method that uncond | |
CVE-2026-34153 |
high | 8.8 | 0.0078 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-34599 |
high | 8.8 | 0.0280 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-42153 |
high | 8.8 | 0.0046 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-42204 |
high | 8.8 | 0.0046 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-34034 |
high | 8.8 | 0.0078 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-34035 |
high | 8.8 | 0.0043 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-34044 |
high | 7.7 | 0.0040 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-34057 |
high | 8.8 | 0.0044 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-34058 |
high | 8.8 | 0.0045 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-34152 |
high | 8.8 | 0.0065 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-34168 |
high | 8.8 | 0.0051 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-34171 |
high | 8.0 | 0.0020 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-42143 |
high | 8.8 | 0.0053 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-42200 |
high | 8.8 | 0.0066 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-34158 |
high | 8.8 | 0.0043 | 2026-10-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-57871 |
high | 7.1 | 0.0054 | 2026-10-29 | Relative path traversal vulnerability in MicroRealEstate file upload functionality allows | |
CVE-2026-5730 |
high | 7.5 | 0.0042 | 2026-10-29 | Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Con | |
CVE-2026-5799 |
high | 7.5 | 0.0042 | 2026-10-29 | Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Con | |
CVE-2026-8377 |
high | 8.2 | 0.0034 | 2026-10-29 | Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Con | |
CVE-2026-14868 |
high | 8.4 | 0.0006 | 2026-10-29 | The encryption algorithm used to protect the configuration of user accounts, stored in the | |
CVE-2026-11340 |
high | 8.3 | 0.0035 | 2026-10-29 | Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functional | |
CVE-2026-11348 |
high | 8.1 | 0.0025 | 2026-10-29 | Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS | |
CVE-2026-13696 |
high | 8.8 | 0.0052 | 2026-10-29 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulne | |
CVE-2026-44938 |
high | 8.8 | 0.0044 | 2026-10-29 | A vulnerability has been identified in Fleet's agent-side deployer, which did not filter s | |
CVE-2026-53479 |
high | 7.2 | 0.0197 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-56811 |
high | 8.7 | 0.0077 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework pho | |
CVE-2026-14904 |
high | 7.1 | 0.0057 | 2026-10-29 | AWS Research and Engineering Studio (RES) is an open-source solution that enables research | |
CVE-2026-23697 |
high | 8.7 | 0.0100 | 2026-10-29 | Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows lo | |
CVE-2026-23698 |
high | 8.6 | 0.0123 | 2026-10-29 | Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in | |
CVE-2026-57851 |
high | 8.5 | 0.0017 | 2026-10-29 | MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib | |
CVE-2026-59708 |
high | 8.7 | 0.0059 | 2026-10-29 | The GET /api/v1/public/:accessId/portfolio endpoint in ghostfolio accepts private access I | |
CVE-2026-7017 |
high | 7.1 | 0.0035 | 2026-10-29 | HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redir | |
CVE-2026-49471 |
high | 8.3 | 0.0037 | 2026-10-29 | Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing c | |
CVE-2026-50007 |
high | 7.2 | 0.0031 | 2026-10-29 | Actual is an open-source personal finance application. Prior to 26.7.0, a missing authoriz | |
CVE-2026-53511 |
high | 8.5 | 0.0022 | 2026-10-29 | calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can exec | |
CVE-2026-58469 |
high | 8.7 | 0.0049 | 2026-10-29 | GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnera | |
CVE-2026-58583 |
high | 8.4 | 0.0014 | 2026-10-29 | FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0. | |
CVE-2026-42953 |
high | 8.4 | 0.0018 | 2026-10-29 | The application contains an out-of-bounds write vulnerability that can be exploited by an | |
CVE-2026-42958 |
high | 8.4 | 0.0019 | 2026-10-29 | The application contains a use-after-free vulnerability that can be exploited to cause mem | |
CVE-2026-49033 |
high | 8.4 | 0.0018 | 2026-10-29 | The application contains a stack-based buffer overflow vulnerability that can be exploited | |
CVE-2026-49229 |
high | 8.3 | 0.0032 | 2026-10-29 | Actual is a local-first personal finance app. Prior to 26.6.0, in OpenID multi-user mode, | |
CVE-2026-54602 |
high | 7.1 | 0.0036 | 2026-10-29 | FastGPT is a knowledge-based AI application platform. Prior to 4.15.0, GET /api/core/ai/re | |
CVE-2026-54607 |
high | 7.7 | 0.0037 | 2026-10-29 | FastGPT is a knowledge-based AI application platform. Prior to 4.15.0-beta4, the HTTP-tool | |
CVE-2026-55418 |
high | 8.6 | 0.0048 | 2026-10-29 | FastGPT is an open source AI knowledge base platform. Prior to v4.15.0-beta5, two FastGPT |