Browse All CVEs
12,312 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-34444 |
high | 7.9 | 0.0061 | 2026-10-29 | Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute | |
CVE-2026-34588 |
high | 8.6 | 0.0048 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34589 |
high | 8.4 | 0.0042 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34783 |
high | 8.1 | 0.0051 | 2026-10-29 | Ferret is a declarative system for working with web data. Prior to 2.0.0-alpha.4, a path t | |
CVE-2026-35029 |
high | 8.7 | 0.3861 | 2026-10-29 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prio | |
CVE-2026-35036 |
high | 7.5 | 0.0033 | 2026-10-29 | Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior t | |
CVE-2026-35037 |
high | 7.2 | 0.0062 | 2026-10-29 | Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior t | |
CVE-2026-35042 |
high | 7.5 | 0.0015 | 2026-10-29 | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, fast-jwt | |
CVE-2025-57835 |
high | 7.5 | 0.0028 | 2026-10-29 | An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem | |
CVE-2025-59440 |
high | 7.5 | 0.0028 | 2026-10-29 | An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem | |
CVE-2026-35043 |
high | 7.8 | 0.0032 | 2026-10-29 | BentoML is a Python library for building online serving systems optimized for AI apps and | |
CVE-2026-35045 |
high | 8.1 | 0.0027 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-35050 |
high | 8.8 | 0.0044 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35164 |
high | 8.8 | 0.0071 | 2026-10-29 | Brave CMS is an open-source CMS. Prior to 2.0.6, an unrestricted file upload vulnerability | |
CVE-2026-35167 |
high | 8.1 | 0.0033 | 2026-10-29 | Kedro is a toolbox for production-ready data science. Prior to 1.3.0, the _get_versioned_p | |
CVE-2026-1839 |
high | 7.8 | 0.0038 | 2026-10-29 | A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` cla | |
CVE-2026-34896 |
high | 7.5 | 0.0012 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming So | |
CVE-2026-34904 |
high | 7.5 | 0.0012 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify Simple Social Media Share But | |
CVE-2026-22666 |
high | 8.6 | 0.1553 | 2026-10-29 | Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code execution v | |
CVE-2026-28808 |
high | 8.3 | 0.0056 | 2026-10-29 | Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated | |
CVE-2026-32144 |
high | 7.6 | 0.0020 | 2026-10-29 | Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module | |
CVE-2026-35554 |
high | 8.7 | 0.0044 | 2026-10-29 | A race condition in the Apache Kafka Java producer client’s buffer pool management can cau | |
CVE-2026-5627 |
high | 7.2 | 0.0081 | 2026-10-29 | A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and inc | |
CVE-2026-33034 |
high | 7.5 | 0.0077 | 2026-10-29 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. ASG | |
CVE-2026-35485 |
high | 7.5 | 0.0068 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-3902 |
high | 7.5 | 0.0044 | 2026-10-29 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. `AS | |
CVE-2026-5373 |
high | 8.4 | 0.0022 | 2026-10-29 | An issue that allowed all-organization administrators to promote accounts to superuser sta | |
CVE-2026-1078 |
high | 7.2 | 0.0032 | 2026-10-29 | An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic | |
CVE-2026-35486 |
high | 7.5 | 0.0040 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35488 |
high | 8.1 | 0.0038 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-35489 |
high | 7.3 | 0.0022 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-35517 |
high | 8.8 | 0.0086 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35518 |
high | 8.8 | 0.0070 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35519 |
high | 8.8 | 0.0054 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35520 |
high | 8.8 | 0.0070 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35521 |
high | 8.8 | 0.0069 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35534 |
high | 7.6 | 0.0017 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site | |
CVE-2026-4931 |
high | 8.6 | 0.0026 | 2026-10-29 | Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large | |
CVE-2026-22683 |
high | 8.7 | 0.0261 | 2026-10-29 | Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability tha | |
CVE-2026-27314 |
high | 8.8 | 0.0026 | 2026-10-29 | Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthent | |
CVE-2026-35574 |
high | 8.7 | 0.0031 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 6.5.3, a stored Cross-Site | |
CVE-2026-35581 |
high | 7.2 | 0.0056 | 2026-10-29 | Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the Executrix utilit | |
CVE-2026-35610 |
high | 8.8 | 0.0030 | 2026-10-29 | PolarLearn is a free and open-source learning program. In 0-PRERELEASE-14 and earlier, set | |
CVE-2026-35611 |
high | 7.5 | 0.0036 | 2026-10-29 | Addressable is an alternative implementation to the URI implementation that is part of Rub | |
CVE-2026-39306 |
high | 7.3 | 0.0029 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, PraisonAI's recipe registry pul | |
CVE-2026-39307 |
high | 8.1 | 0.0031 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, The PraisonAI templates install | |
CVE-2026-39308 |
high | 7.1 | 0.0033 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, PraisonAI's recipe registry pub | |
CVE-2026-22682 |
high | 8.4 | 0.0013 | 2026-10-29 | OpenHarness prior to commit 166fcfe contains an improper access control vulnerability in b | |
CVE-2026-24146 |
high | 7.5 | 0.0053 | 2026-10-29 | NVIDIA Triton Inference Server contains a vulnerability where insufficient input validatio | |
CVE-2026-24156 |
high | 7.3 | 0.0026 | 2026-10-29 | NVIDIA DALI contains a vulnerability where an attacker could cause a deserialization of un |