Browse All CVEs
33,186 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-116251 |
medium | 4.2 | 0.0011 | 2026-10-30 | pgAdmin 4 did not invalidate a user's existing sessions when their password changed, eithe | |
CVE-2026-116252 |
medium | 6.5 | 0.0026 | 2026-10-30 | pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname | |
CVE-2026-119331 |
high | 7.1 | 0.0018 | 2026-10-30 | Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3616e5173835f0f4c155e | |
CVE-2026-119332 |
high | 8.8 | 0.0024 | 2026-10-30 | Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a04 | |
CVE-2026-119333 |
high | 7.8 | 0.0014 | 2026-10-30 | draw.io Desktop is the official Electron build of draw.io. Prior to 31.5.2, the Windows ap | |
CVE-2026-119334 |
low | 2.2 | 0.0034 | 2026-10-30 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing a | |
CVE-2026-119335 |
high | 7.8 | 0.0023 | 2026-10-30 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing a | |
CVE-2026-119336 |
high | 7.8 | 0.0025 | 2026-10-30 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing a | |
CVE-2026-119337 |
high | 7.1 | 0.0034 | 2026-10-30 | RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. From 0.25.2 until 0 | |
CVE-2026-55098 |
medium | 6.5 | 0.0032 | 2026-10-30 | Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-ver | |
CVE-2026-61618 |
medium | 6.9 | 0.0037 | 2026-10-30 | SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator public-insta | |
CVE-2026-61620 |
critical | 9.8 | 0.0039 | 2026-10-30 | HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications t | |
CVE-2026-61694 |
low | 3.7 | 0.0027 | 2026-10-30 | go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through the June 18 | |
CVE-2026-62333 |
high | 8.7 | 0.0040 | 2026-10-30 | OpenVM is a performant and modular zkVM framework built for customization and extensibilit | |
CVE-2026-62334 |
high | 8.7 | 0.0053 | 2026-10-30 | OpenVM is a performant and modular zkVM framework built for customization and extensibilit | |
CVE-2026-62335 |
medium | 6.9 | 0.0038 | 2026-10-30 | OpenVM is a performant and modular zkVM framework built for customization and extensibilit | |
CVE-2026-62337 |
medium | 6.9 | 0.0030 | 2026-10-30 | SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circu | |
CVE-2026-61850 |
critical | 9.3 | 0.0036 | 2026-10-30 | Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, | |
CVE-2026-62302 |
high | 8.7 | 0.0046 | 2026-10-30 | MyTube is a self-hosted downloader and player for several video websites. Prior to version | |
CVE-2026-55598 |
critical | 9.1 | 0.0033 | 2026-10-30 | PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0. | |
CVE-2026-95673 |
— | — | — | 2026-10-30 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-92243 | |
CVE-2026-115830 |
high | 8.7 | 0.0029 | 2026-10-30 | In Secret Server versions earlier than 12.3.1, a user under certain conditions could submi | |
CVE-2026-115828 |
medium | 5.1 | 0.0036 | 2026-10-30 | In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the P | |
CVE-2026-115829 |
high | 8.7 | 0.0031 | 2026-10-30 | In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step | |
CVE-2026-119329 |
medium | 4.3 | 0.0025 | 2026-10-30 | Immich is a high-performance self-hosted photo and video management solution. Prior to 3.0 | |
CVE-2026-119330 |
low | 3.5 | 0.0022 | 2026-10-30 | Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2 | |
CVE-2026-119328 |
medium | 6.5 | 0.0044 | 2026-10-30 | Immich is a high-performance self-hosted photo and video management solution. Prior to 3.3 | |
CVE-2026-78402 |
high | 7.3 | 0.0015 | 2026-10-30 | Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys | |
CVE-2026-78403 |
critical | 9.3 | 0.0058 | 2026-10-30 | Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Key | |
CVE-2026-119730 |
medium | 5.1 | 0.0025 | 2026-10-30 | Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerabilit | |
CVE-2026-62301 |
high | 7.1 | 0.0041 | 2026-10-30 | MyTube is a self-hosted downloader and player for several video websites. Prior to version | |
CVE-2026-55493 |
medium | 6.5 | 0.0030 | 2026-10-30 | HotCRP is conference review software. Starting with 2.101, the `cmt:` search term checks w | |
CVE-2026-62284 |
high | 8.6 | 0.0050 | 2026-10-30 | OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, th | |
CVE-2026-109213 |
— | — | — | 2026-10-30 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-11349 | |
CVE-2026-61586 |
high | 8.2 | 0.0036 | 2026-10-30 | Copernik XML Factory provides secure-by-default JAXP factory creation for Java. Prior to 0 | |
CVE-2026-62298 |
none | — | 0.0050 | 2026-10-30 | mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereferenc | |
CVE-2026-62303 |
medium | 5.9 | 0.0031 | 2026-10-30 | Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, `Se | |
CVE-2026-62331 |
high | 8.2 | 0.0078 | 2026-10-30 | praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker i | |
CVE-2026-7003 |
medium | 6.9 | 0.0029 | 2026-10-30 | WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that all | |
CVE-2026-7004 |
medium | 5.1 | 0.0027 | 2026-10-30 | WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scri | |
CVE-2026-7005 |
medium | 5.3 | 0.0012 | 2026-10-30 | WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forger | |
CVE-2025-11537 |
medium | 5.0 | 0.0017 | 2026-10-30 | A flaw was found in Keycloak. When the logging format is configured to a verbose, user-sup | |
CVE-2025-57848 |
medium | 6.4 | 0.0019 | 2026-10-30 | A container privilege escalation flaw was found in certain Container-native Virtualization | |
CVE-2026-90888 |
critical | 9.8 | 0.0032 | 2026-10-30 | Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions. | |
CVE-2026-94175 |
high | 7.1 | 0.0018 | 2026-10-30 | Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions. | |
CVE-2026-73186 |
high | 8.8 | 0.0039 | 2026-10-30 | Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions. | |
CVE-2026-78527 |
high | 8.8 | 0.0037 | 2026-10-30 | Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions. | |
CVE-2026-62162 |
high | 8.2 | 0.0037 | 2026-10-30 | Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch | |
CVE-2026-62264 |
high | 7.5 | 0.0045 | 2026-10-30 | PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2 | |
CVE-2026-54854 |
medium | 6.3 | 0.0024 | 2026-10-30 | Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions. |