Browse All CVEs
33,178 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-62254 |
medium | 5.5 | 0.0016 | 2026-10-30 | LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially craft | |
CVE-2026-62863 |
critical | 9.6 | 0.0031 | 2026-10-30 | MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing run | |
CVE-2026-119343 |
medium | 6.8 | 0.0028 | 2026-10-30 | Stirling-PDF is a locally hosted web application that facilitates various operations on PD | |
CVE-2026-40573 |
high | 8.6 | 0.0013 | 2026-10-30 | NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to vers | |
CVE-2026-62250 |
medium | 5.5 | 0.0016 | 2026-10-30 | LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pr | |
CVE-2026-62860 |
medium | 5.3 | 0.0024 | 2026-10-30 | Picsou is a self-hosted personal finance dashboard. In the affected login implementation, | |
CVE-2026-62968 |
high | 8.7 | 0.0043 | 2026-10-30 | Dream Displays provides in-game screens for streaming videos in Minecraft. From 1.5.0 unti | |
CVE-2026-54610 |
low | 3.3 | 0.0012 | 2026-10-30 | LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV_to_utf8() | |
CVE-2026-62958 |
high | 7.9 | 0.0021 | 2026-10-30 | 1 PoC | libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause o |
CVE-2026-62965 |
high | 7.0 | 0.0034 | 2026-10-30 | SABnzbd is an open source automated Usenet download tool. Prior to 5.1.0Beta3, orphan-job | |
CVE-2026-62966 |
high | 7.5 | 0.0043 | 2026-10-30 | ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, | |
CVE-2026-110899 |
high | 7.1 | 0.0022 | 2026-10-30 | 1 PoC | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne |
CVE-2026-109697 |
medium | 6.5 | 0.0014 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-58412 |
high | 8.2 | 0.0023 | 2026-10-30 | Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP ser | |
CVE-2026-62300 |
medium | 6.5 | 0.0025 | 2026-10-30 | Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP ser | |
CVE-2026-119339 |
medium | 5.5 | 0.0016 | 2026-10-30 | Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a | |
CVE-2026-119338 |
medium | 6.9 | 0.0014 | 2026-10-30 | Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/a | |
CVE-2026-62847 |
high | 8.2 | 0.0015 | 2026-10-30 | Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to | |
CVE-2026-62848 |
high | 7.3 | 0.0019 | 2026-10-30 | Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023 | |
CVE-2026-117666 |
critical | 9.1 | 0.0019 | 2026-10-30 | Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_v | |
CVE-2026-119340 |
medium | 5.5 | 0.0012 | 2026-10-30 | Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize | |
CVE-2026-81627 |
high | 8.2 | 0.0019 | 2026-10-30 | A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate t | |
CVE-2026-100517 |
high | 7.5 | 0.0032 | 2026-10-30 | Authorization Bypass Through User-Controlled Key vulnerability in VillaTheme Photo Reviews | |
CVE-2026-109763 |
medium | 5.4 | 0.0025 | 2026-10-30 | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox | |
CVE-2026-95117 |
low | 3.7 | 0.0039 | 2026-10-30 | Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to | |
CVE-2026-68482 |
medium | 5.3 | 0.0027 | 2026-10-30 | Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: | |
CVE-2026-113264 |
high | 8.8 | 0.0043 | 2026-10-30 | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a | |
CVE-2026-60881 |
medium | 6.5 | 0.0046 | 2026-10-30 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-87346 |
high | 8.7 | 0.0033 | 2026-10-30 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Or | |
CVE-2026-116238 |
high | 8.1 | 0.0040 | 2026-10-30 | In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins | |
CVE-2026-116239 |
high | 8.5 | 0.0039 | 2026-10-30 | In server mode pgAdmin 4 keeps an account per authentication source, so the same username | |
CVE-2026-116240 |
medium | 6.5 | 0.0026 | 2026-10-30 | In server mode pgAdmin 4 validates a path into the user's storage directory with check_acc | |
CVE-2026-116241 |
critical | 9.9 | 0.0032 | 2026-10-30 | pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO c | |
CVE-2026-116242 |
high | 8.2 | 0.0023 | 2026-10-30 | pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_direc | |
CVE-2026-116243 |
high | 7.5 | 0.0032 | 2026-10-30 | pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets i | |
CVE-2026-116244 |
high | 8.2 | 0.0028 | 2026-10-30 | When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, | |
CVE-2026-116245 |
high | 8.2 | 0.0016 | 2026-10-30 | libpq looks a connection service up in the service file of the operating-system account ru | |
CVE-2026-116246 |
medium | 6.5 | 0.0019 | 2026-10-30 | To pass a server's password to psql and to the utilities pgAdmin 4 runs as background proc | |
CVE-2026-116247 |
high | 8.2 | 0.0013 | 2026-10-30 | When a server in pgAdmin 4 had no password file, client certificate or client key configur | |
CVE-2026-116248 |
medium | 6.8 | 0.0023 | 2026-10-30 | In pgAdmin 4 server mode only administrators are meant to share a server with all users; t | |
CVE-2026-116249 |
high | 8.4 | 0.0018 | 2026-10-30 | In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and | |
CVE-2026-116250 |
medium | 6.5 | 0.0010 | 2026-10-30 | In server mode pgAdmin 4 validates a path a user gives for a file in their storage directo | |
CVE-2026-116251 |
medium | 4.2 | 0.0011 | 2026-10-30 | pgAdmin 4 did not invalidate a user's existing sessions when their password changed, eithe | |
CVE-2026-116252 |
medium | 6.5 | 0.0026 | 2026-10-30 | pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname | |
CVE-2026-119331 |
high | 7.1 | 0.0018 | 2026-10-30 | Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3616e5173835f0f4c155e | |
CVE-2026-119332 |
high | 8.8 | 0.0024 | 2026-10-30 | Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a04 | |
CVE-2026-119333 |
high | 7.8 | 0.0014 | 2026-10-30 | draw.io Desktop is the official Electron build of draw.io. Prior to 31.5.2, the Windows ap | |
CVE-2026-119334 |
low | 2.2 | 0.0034 | 2026-10-30 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing a | |
CVE-2026-119335 |
high | 7.8 | 0.0023 | 2026-10-30 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing a | |
CVE-2026-119336 |
high | 7.8 | 0.0025 | 2026-10-30 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing a |