Browse All CVEs
11,694 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-3457 |
high | 7.0 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-4620 |
high | 7.1 | 0.0101 | 2026-10-29 | OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker t | |
CVE-2026-4622 |
high | 7.1 | 0.0088 | 2026-10-29 | OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker t | |
CVE-2026-4982 |
high | 7.3 | 0.0023 | 2026-10-29 | A user with permission "update world" in any Venueless world is able to exfiltrate chat me | |
CVE-2026-33206 |
high | 8.2 | 0.0022 | 2026-10-29 | calibre is a cross-platform e-book manager for viewing, converting, editing, and catalogin | |
CVE-2026-33748 |
high | 8.2 | 0.0048 | 2026-10-29 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expre | |
CVE-2026-33750 |
high | 7.5 | 0.0045 | 2026-10-29 | The brace-expansion library generates arbitrary strings containing a common prefix and suf | |
CVE-2026-33755 |
high | 8.8 | 0.0039 | 2026-10-29 | Group-Office is an enterprise customer relationship management and groupware tool. Prior t | |
CVE-2026-33767 |
high | 7.1 | 0.0052 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, in `ob | |
CVE-2026-33770 |
high | 7.1 | 0.0050 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `f | |
CVE-2026-4960 |
high | 7.4 | 0.0079 | 2026-10-29 | A vulnerability was determined in Tenda AC6 15.03.05.16. Affected is the function fromWiza | |
CVE-2026-4961 |
high | 7.4 | 0.0079 | 2026-10-29 | A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is | |
CVE-2026-26061 |
high | 8.7 | 0.0045 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.0, Fleet contained multiple | |
CVE-2026-34375 |
high | 8.2 | 0.0030 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the YP | |
CVE-2026-31943 |
high | 8.5 | 0.0022 | 2026-10-29 | LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.3, `isPrivateI | |
CVE-2026-31945 |
high | 7.7 | 0.0026 | 2026-10-29 | LibreChat is a ChatGPT clone with additional features. Versions 0.8.2-rc2 through 0.8.2 ar | |
CVE-2026-33044 |
high | 7.3 | 0.0023 | 2026-10-29 | Home Assistant is open source home automation software that puts local control and privacy | |
CVE-2026-33045 |
high | 7.3 | 0.0021 | 2026-10-29 | Home Assistant is open source home automation software that puts local control and privacy | |
CVE-2026-33654 |
high | 8.9 | 0.0051 | 2026-10-29 | nanobot is a personal AI assistant. Prior to version 0.1.6, an indirect prompt injection v | |
CVE-2026-33765 |
high | 8.9 | 0.0130 | 2026-10-29 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and in | |
CVE-2026-33872 |
high | 7.1 | 0.0040 | 2026-10-29 | elixir-nodejs provides an Elixir API for calling Node.js functions. A vulnerability in ver | |
CVE-2026-4974 |
high | 7.4 | 0.0064 | 2026-10-29 | A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fro | |
CVE-2026-4975 |
high | 7.4 | 0.0064 | 2026-10-29 | A vulnerability has been found in Tenda AC15 15.03.05.19. This affects the function formSe | |
CVE-2026-33874 |
high | 7.8 | 0.0029 | 2026-10-29 | Gematik Authenticator securely authenticates users for login to digital health application | |
CVE-2026-33906 |
high | 7.2 | 0.0040 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, the NetworkM | |
CVE-2026-34046 |
high | 8.7 | 0.0048 | 2026-10-29 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to ve | |
CVE-2026-4976 |
high | 7.4 | 0.0067 | 2026-10-29 | A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affe | |
CVE-2026-27309 |
high | 7.8 | 0.0022 | 2026-10-29 | Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerabi | |
CVE-2026-33941 |
high | 8.2 | 0.0030 | 2026-10-29 | Handlebars provides the power necessary to let users build semantic templates. In versions | |
CVE-2026-33946 |
high | 8.2 | 0.0047 | 2026-10-29 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prio | |
CVE-2026-33953 |
high | 8.5 | 0.0028 | 2026-10-29 | LinkAce is a self-hosted archive to collect website links. Versions prior to 2.5.3 block d | |
CVE-2026-33955 |
high | 8.6 | 0.0035 | 2026-10-29 | Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop, a cross-site scrip | |
CVE-2026-33980 |
high | 8.1 | 0.0040 | 2026-10-29 | Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI as | |
CVE-2026-33981 |
high | 8.3 | 0.0048 | 2026-10-29 | changedetection.io is a free open source web page change detection tool. Prior to 0.54.7, | |
CVE-2026-33991 |
high | 8.8 | 0.0040 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file `html | |
CVE-2026-5272 |
high | 8.8 | 0.0056 | 2026-10-29 | Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote atta | |
CVE-2026-5274 |
high | 8.8 | 0.0043 | 2026-10-29 | Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote attac | |
CVE-2026-5275 |
high | 8.8 | 0.0045 | 2026-10-29 | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a re | |
CVE-2026-5277 |
high | 7.5 | 0.0033 | 2026-10-29 | Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a re | |
CVE-2026-5278 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a r | |
CVE-2026-5279 |
high | 8.8 | 0.0043 | 2026-10-29 | Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker | |
CVE-2026-5280 |
high | 8.8 | 0.0039 | 2026-10-29 | Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote atta | |
CVE-2026-5282 |
high | 8.1 | 0.0025 | 2026-10-29 | Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote | |
CVE-2026-5284 |
high | 7.5 | 0.0035 | 2026-10-29 | Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker | |
CVE-2026-5285 |
high | 8.8 | 0.0040 | 2026-10-29 | Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker | |
CVE-2026-5286 |
high | 8.8 | 0.0039 | 2026-10-29 | Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker | |
CVE-2026-5287 |
high | 8.8 | 0.0051 | 2026-10-29 | Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker t | |
CVE-2026-5292 |
high | 8.8 | 0.0032 | 2026-10-29 | Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote | |
CVE-2026-27101 |
high | 7.2 | 0.0040 | 2026-10-29 | Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5 | |
CVE-2026-28265 |
high | 7.1 | 0.0012 | 2026-10-29 | PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged |