Browse All CVEs
1,829 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42004 |
low | 3.7 | 0.0022 | 2026-10-29 | An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering | |
CVE-2026-12755 |
low | 2.7 | 0.0037 | 2026-10-29 | Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2. | |
CVE-2026-13314 |
low | 2.0 | 0.0043 | 2026-10-29 | Malicious HTML content could be injected into the content rendered by the pretix-digital p | |
CVE-2026-57234 |
low | 2.6 | 0.0020 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-57236 |
low | 1.7 | 0.0043 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-57434 |
low | 1.7 | 0.0046 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-57435 |
low | 1.7 | 0.0046 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-57436 |
low | 1.7 | 0.0040 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-57437 |
low | 1.7 | 0.0040 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-57534 |
low | 2.1 | 0.0043 | 2026-10-29 | Malicious HTML content could be injected into the content of a page in the pretix-pages pl | |
CVE-2026-57587 |
low | 2.9 | 0.0045 | 2026-10-29 | A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who cont | |
CVE-2026-57588 |
low | 1.8 | 0.0033 | 2026-10-29 | A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan resul | |
CVE-2026-48940 |
low | 3.4 | 0.0028 | 2026-10-29 | A Joomla user with K2 "create item" rights (Author tier by default) can submit an article | |
CVE-2026-57438 |
low | 2.2 | 0.0013 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-13350 |
low | 2.3 | 0.0027 | 2026-10-29 | Permissions where checked incorrectly during room creation, allowing attackers to create r | |
CVE-2026-55967 |
low | 2.0 | 0.0018 | 2026-10-29 | AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 Gi | |
CVE-2026-57522 |
low | 2.3 | 0.0046 | 2026-10-29 | Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTem | |
CVE-2026-13322 |
low | 3.8 | 0.0013 | 2026-10-29 | A flaw was found in KubeVirt's downward metrics virtio-serial server. The server reads gue | |
CVE-2026-48935 |
low | 3.3 | 0.0019 | 2026-10-29 | A flaw in Node.js Permission API can cause a file metadata to be modified even on a path t | |
CVE-2026-48936 |
low | 3.3 | 0.0014 | 2026-10-29 | A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain | |
CVE-2026-12129 |
low | 2.0 | 0.0020 | 2026-10-29 | A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Affected | |
CVE-2026-12130 |
low | 2.0 | 0.0020 | 2026-10-29 | A security flaw has been discovered in CodeAstro Human Resource Management System 1.0. Thi | |
CVE-2026-53607 |
low | 3.7 | 0.0027 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. In versions up to and i | |
CVE-2026-12131 |
low | 2.1 | 0.0025 | 2026-10-29 | A weakness has been identified in CodeAstro Human Resource Management System 1.0. This vul | |
CVE-2026-10636 |
low | 3.7 | 0.0031 | 2026-10-29 | In Zephyr's IPv4 IGMP implementation, igmp_send() in subsys/net/ip/igmp.c read the network | |
CVE-2026-53848 |
low | 2.3 | 0.0019 | 2026-10-29 | OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authent | |
CVE-2026-53852 |
low | 2.3 | 0.0021 | 2026-10-29 | OpenClaw before 2026.4.25 contains a scope containment bypass vulnerability in device re-p | |
CVE-2026-46815 |
low | 3.2 | 0.0016 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMS | |
CVE-2026-46816 |
low | 3.2 | 0.0016 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMS | |
CVE-2026-46874 |
low | 3.2 | 0.0013 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-46977 |
low | 3.2 | 0.0016 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMS | |
CVE-2026-0057 |
low | 3.3 | 0.0006 | 2026-10-29 | In Contacts Provider, there is a possible way to access an incoming call's phone number an | |
CVE-2026-12458 |
low | 3.1 | 0.0019 | 2026-10-29 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed | |
CVE-2026-39199 |
low | 2.9 | 0.0013 | 2026-10-29 | snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file. | |
CVE-2024-24769 |
low | 2.1 | 0.0028 | 2026-10-29 | vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to versio | |
CVE-2026-12566 |
low | 3.1 | 0.0017 | 2026-10-29 | The docker_pull module uses the realm parameter from a Docker registry's WWW-Authenticate | |
CVE-2026-12567 |
low | 2.2 | 0.0009 | 2026-10-29 | The github_workflows module constructs local directory paths from user-controlled reposito | |
CVE-2026-50268 |
low | 1.9 | 0.0005 | 2026-10-29 | Steeltoe is an open source project that provides a collection of libraries that helps user | |
CVE-2026-8668 |
low | 2.3 | 0.0027 | 2026-10-29 | A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access | |
CVE-2026-44046 |
low | 2.3 | 0.0047 | 2026-10-29 | Use of Less Trusted Source vulnerability in Apache APISIX. Attacker can take advantage of | |
CVE-2026-44915 |
low | 2.1 | 0.0064 | 2026-10-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX. The d | |
CVE-2026-48895 |
low | 2.1 | 0.0065 | 2026-10-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX. The a | |
CVE-2026-49231 |
low | 2.3 | 0.0057 | 2026-10-29 | Authentication Bypass by Spoofing vulnerability in opa plugin. An attacker could relay sp | |
CVE-2026-49871 |
low | 2.1 | 0.0035 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in the cas-auth plugin under default confi | |
CVE-2026-49358 |
low | 3.0 | 0.0017 | 2026-10-29 | PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior t | |
CVE-2026-56355 |
low | 3.7 | 0.0040 | 2026-10-29 | GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorizati | |
CVE-2026-12770 |
low | 2.1 | 0.0057 | 2026-10-29 | A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an | |
CVE-2026-12771 |
low | 1.3 | 0.0043 | 2026-10-29 | A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown fu | |
CVE-2026-12772 |
low | 2.1 | 0.0040 | 2026-10-29 | A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the func | |
CVE-2026-12774 |
low | 2.1 | 0.0040 | 2026-10-29 | A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by th |