Browse All CVEs
13,166 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-54223 |
high | 8.6 | 0.0063 | 2026-10-29 | UBB.threads is vulnerable to Path traversal, allowing attackers with privilege to edit tem | |
CVE-2026-54224 |
high | 7.1 | 0.0027 | 2026-10-29 | UBB.threads is vulnerable to Denial of Service (DoS). By sending multiple concurrent reque | |
CVE-2026-56012 |
high | 8.5 | 0.0036 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-44688 |
high | 8.4 | 0.0051 | 2026-10-29 | In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and | |
CVE-2026-44691 |
high | 8.4 | 0.0041 | 2026-10-29 | In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g | |
CVE-2026-46580 |
high | 8.4 | 0.0051 | 2026-10-29 | In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttem | |
CVE-2026-48617 |
high | 8.2 | 0.0032 | 2026-10-29 | A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeRepo | |
CVE-2026-55204 |
high | 8.7 | 0.0048 | 2026-10-29 | HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulne | |
CVE-2026-55237 |
high | 8.8 | 0.0023 | 2026-10-29 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous | |
CVE-2026-12390 |
high | 8.4 | 0.0019 | 2026-10-29 | In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be expl | |
CVE-2026-48937 |
high | 7.5 | 0.0057 | 2026-10-29 | A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after se | |
CVE-2026-25865 |
high | 8.5 | 0.0020 | 2026-10-29 | Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability th | |
CVE-2026-48716 |
high | 8.7 | 0.0033 | 2026-10-29 | nanobot is a personal AI assistant. In versions 0.1.5.post3 and prior, the WhatsApp bridge | |
CVE-2026-44663 |
high | 7.1 | 0.0021 | 2026-10-29 | OpenEXR is the reference implementation and specification for the EXR image format, widely | |
CVE-2026-45696 |
high | 8.3 | 0.0042 | 2026-10-29 | OpenEXR is the reference implementation and specification for the EXR image format, widely | |
CVE-2026-46699 |
high | 7.6 | 0.0033 | 2026-10-29 | conda-smithy is a tool for combining a conda recipe with configurations to build using fre | |
CVE-2026-49248 |
high | 8.3 | 0.0057 | 2026-10-29 | OneDev is a Git server with CI/CD, kanban, and packages. In versions 15.0.6 and below, Tar | |
CVE-2026-32174 |
high | 8.8 | 0.0077 | 2026-10-29 | Improper authentication in Azure Bot Service allows an authorized attacker to elevate priv | |
CVE-2026-47633 |
high | 7.5 | 0.0103 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Cost Management Interactive | |
CVE-2026-54130 |
high | 7.5 | 0.0108 | 2026-10-29 | Missing authentication for critical function in M365 Copilot allows an unauthorized attack | |
CVE-2026-8100 |
high | 8.6 | 0.0055 | 2026-10-29 | Impact A security issue has been identified in Chef 360 that could allow unauthorized acc | |
CVE-2026-12044 |
high | 8.7 | 0.0071 | 2026-10-29 | SQL injection in pgAdmin 4 across every dialog template that renders ``COMMENT ON ... IS ' | |
CVE-2026-50034 |
high | 7.1 | 0.0021 | 2026-10-29 | An attacker within BLE communication range can passively intercept wireless traffic and o | |
CVE-2026-52866 |
high | 7.1 | 0.0035 | 2026-10-29 | An attacker within BLE communication range can monopolize the device's only available BLE | |
CVE-2026-8805 |
high | 8.7 | 0.0064 | 2026-10-29 | Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Ele | |
CVE-2026-8806 |
high | 8.7 | 0.0064 | 2026-10-29 | Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-EN | |
CVE-2026-46461 |
high | 7.8 | 0.0014 | 2026-10-29 | Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control | |
CVE-2026-11576 |
high | 7.5 | 0.0046 | 2026-10-29 | The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in | |
CVE-2026-34192 |
high | 7.7 | 0.0016 | 2026-10-29 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-41156 |
high | 7.7 | 0.0016 | 2026-10-29 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-53915 |
high | 8.8 | 0.0045 | 2026-10-29 | In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted proje | |
CVE-2026-56142 |
high | 8.8 | 0.0062 | 2026-10-29 | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3. | |
CVE-2026-12104 |
high | 8.6 | 0.0132 | 2026-10-29 | OS command injection in the environment and tunnel configuration functionality in SIMA Gmb | |
CVE-2026-39999 |
high | 7.0 | 0.0063 | 2026-10-29 | Authentication Bypass by Spoofing vulnerability in Apache APISIX. The attacker can comple | |
CVE-2026-49357 |
high | 8.8 | 0.0056 | 2026-10-29 | Line Desktop MCP is a project that, while unaffiliated with the official line-bot-mcp-serv | |
CVE-2026-4026 |
high | 8.7 | 0.0035 | 2026-10-29 | A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 that could a | |
CVE-2026-4027 |
high | 7.1 | 0.0035 | 2026-10-29 | A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that | |
CVE-2026-49260 |
high | 8.2 | 0.0021 | 2026-10-29 | PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior t | |
CVE-2026-49286 |
high | 8.1 | 0.0073 | 2026-10-29 | PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior t | |
CVE-2026-49287 |
high | 7.4 | 0.0046 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.23 an | |
CVE-2026-49290 |
high | 7.6 | 0.0083 | 2026-10-29 | Slopsmith is a self-contained web application for browsing, playing, and practicing Rocksm | |
CVE-2023-54357 |
high | 8.7 | 0.0066 | 2026-10-29 | Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that a | |
CVE-2026-49291 |
high | 8.1 | 0.0049 | 2026-10-29 | mcp-memory-service is a semantic memory layer for AI applications. Prior to version 10.65. | |
CVE-2026-49293 |
high | 7.5 | 0.0064 | 2026-10-29 | js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. Version | |
CVE-2026-49338 |
high | 7.1 | 0.0029 | 2026-10-29 | gonic is a music streaming server / free-software subsonic server API implementation. Prio | |
CVE-2026-49339 |
high | 7.1 | 0.0031 | 2026-10-29 | gonic is a music streaming server / free-software subsonic server API implementation. The | |
CVE-2026-49340 |
high | 8.1 | 0.0031 | 2026-10-29 | gonic is a music streaming server / free-software subsonic server API implementation. Prio | |
CVE-2026-48089 |
high | 7.1 | 0.0036 | 2026-10-29 | DevGuard provides vulnerability management for the full software supply chain. Prior to 1. | |
CVE-2026-48715 |
high | 7.7 | 0.0033 | 2026-10-29 | radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the `radvdump` uti | |
CVE-2026-48774 |
high | 7.5 | 0.0039 | 2026-10-29 | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 3.0.0 thro |