Browse All CVEs
10,024 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-5383 |
medium | 4.4 | 0.0018 | 2026-10-29 | An issue that could allow access to Explorer groups from outside of the authorized organiz | |
CVE-2026-5384 |
medium | 5.8 | 0.0021 | 2026-10-29 | An issue that could allow a credential to be updated and used for a task from outside of t | |
CVE-2026-1079 |
medium | 6.0 | 0.0026 | 2026-10-29 | A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all | |
CVE-2026-35487 |
medium | 5.3 | 0.0026 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35491 |
medium | 6.1 | 0.0016 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35492 |
medium | 6.5 | 0.0043 | 2026-10-29 | Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDat | |
CVE-2026-35515 |
medium | 6.3 | 0.0023 | 2026-10-29 | Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1. | |
CVE-2026-35516 |
medium | 5.0 | 0.0027 | 2026-10-29 | LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository: | |
CVE-2026-35571 |
medium | 4.8 | 0.0018 | 2026-10-29 | Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, Mustache navigation | |
CVE-2026-5745 |
medium | 5.5 | 0.0016 | 2026-10-29 | A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL | |
CVE-2026-27315 |
medium | 5.5 | 0.0016 | 2026-10-29 | Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive inf | |
CVE-2026-32588 |
medium | 6.5 | 0.0053 | 2026-10-29 | Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to | |
CVE-2026-35583 |
medium | 5.3 | 0.0032 | 2026-10-29 | Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the configuration AP | |
CVE-2026-35608 |
medium | 5.3 | 0.0019 | 2026-10-29 | QuickDrop is an easy-to-use file sharing application. Prior to 1.5.3, a stored XSS vulnera | |
CVE-2026-35613 |
medium | 4.7 | 0.0014 | 2026-10-29 | coursevault-preview is a utility for previewing course material files from a configured di | |
CVE-2026-39314 |
medium | 6.2 | 0.0015 | 2026-10-29 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operatin | |
CVE-2026-39316 |
medium | 6.2 | 0.0018 | 2026-10-29 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operatin | |
CVE-2026-22680 |
medium | 6.9 | 0.0038 | 2026-10-29 | OpenViking versions prior to 0.3.3 contain a missing authorization vulnerability in the ta | |
CVE-2026-24147 |
medium | 4.8 | 0.0048 | 2026-10-29 | NVIDIA Triton Inference Server contains a vulnerability in triton server where an attacker | |
CVE-2026-39321 |
medium | 6.3 | 0.0023 | 2026-10-29 | Parse Server is an open source backend that can be deployed to any infrastructure that can | |
CVE-2026-39335 |
medium | 6.1 | 0.0025 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.1, there is Stored XSS | |
CVE-2026-39336 |
medium | 6.1 | 0.0021 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site | |
CVE-2026-5301 |
medium | 6.1 | 0.0028 | 2026-10-29 | Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated a | |
CVE-2026-5841 |
medium | 5.5 | 0.0063 | 2026-10-29 | A weakness has been identified in Tenda i3 1.0.0.6(2204). The affected element is the func | |
CVE-2026-5842 |
medium | 5.5 | 0.0039 | 2026-10-29 | A security vulnerability has been detected in decolua 9router up to 0.3.47. The impacted e | |
CVE-2026-5849 |
medium | 5.5 | 0.0063 | 2026-10-29 | A vulnerability was determined in Tenda i12 1.0.0.11(3862). The impacted element is an unk | |
CVE-2026-34538 |
medium | 6.5 | 0.0069 | 2026-10-29 | Apache Airflow versions 3.0.0 through 3.1.8 DagRun wait endpoint returns XCom result value | |
CVE-2026-4901 |
medium | 6.9 | 0.0026 | 2026-10-29 | AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials ar | |
CVE-2026-34757 |
medium | 4.4 | 0.0019 | 2026-10-29 | LIBPNG is a reference library for use in applications that read, create, and manipulate PN | |
CVE-2026-4114 |
medium | 6.6 | 0.0060 | 2026-10-29 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remo | |
CVE-2026-33005 |
medium | 4.3 | 0.0042 | 2026-10-29 | Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings. Any re | |
CVE-2026-35040 |
medium | 5.3 | 0.0038 | 2026-10-29 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.1, using certain | |
CVE-2026-35041 |
medium | 6.5 | 0.0026 | 2026-10-29 | fast-jwt provides fast JSON Web Token (JWT) implementation. From 5.0.0 to 6.2.0, a denial- | |
CVE-2026-39941 |
medium | 5.3 | 0.0026 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an XSS vulnerability | |
CVE-2026-39855 |
medium | 5.5 | 0.0014 | 2026-10-29 | osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.1 | |
CVE-2026-39856 |
medium | 5.5 | 0.0014 | 2026-10-29 | osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.1 | |
CVE-2026-39958 |
medium | 5.2 | 0.0036 | 2026-10-29 | oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetch | |
CVE-2026-5961 |
medium | 5.5 | 0.0026 | 2026-10-29 | A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0 | |
CVE-2026-5962 |
medium | 5.5 | 0.0054 | 2026-10-29 | A vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R | |
CVE-2026-35207 |
medium | 5.4 | 0.0015 | 2026-10-29 | dde-control-center is the control panel of DDE, the Deepin Desktop Environment. plugin-dee | |
CVE-2026-39315 |
medium | 6.1 | 0.0029 | 2026-10-29 | Unhead is a document head and template manager. Prior to 2.1.13, useHeadSafe() is the comp | |
CVE-2026-39961 |
medium | 4.9 | 0.0040 | 2026-10-29 | Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes clus | |
CVE-2026-39985 |
medium | 6.1 | 0.0020 | 2026-10-29 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application t | |
CVE-2026-5329 |
medium | 6.5 | 0.0046 | 2026-10-29 | Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerab | |
CVE-2026-5970 |
medium | 5.5 | 0.0039 | 2026-10-29 | A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the fun | |
CVE-2026-5971 |
medium | 5.5 | 0.0039 | 2026-10-29 | A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects | |
CVE-2026-34941 |
medium | 6.9 | 0.0038 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmti | |
CVE-2026-34942 |
medium | 5.9 | 0.0035 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmti | |
CVE-2026-34943 |
medium | 5.6 | 0.0032 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmti | |
CVE-2026-34944 |
medium | 4.1 | 0.0023 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, On x86 |