Browse All CVEs
33,202 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-119117 |
medium | 6.5 | 0.0015 | 2026-10-30 | Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for | |
CVE-2026-61840 |
low | 2.3 | 0.0030 | 2026-10-30 | Quest Bot is an opensource Discord Bot. Prior to 1.1.9, the `image to GIF` command uses a | |
CVE-2024-12397 |
high | 7.4 | 0.0093 | 2026-10-30 | A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-deli | |
CVE-2025-6017 |
medium | 5.5 | 0.0016 | 2026-10-30 | A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10 | |
CVE-2026-62160 |
high | 8.7 | 0.0042 | 2026-10-30 | Daptin is a GraphQL/JSON-API headless CMS. Prior to 0.12.26, the global `LanguageMiddlewar | |
CVE-2026-61854 |
high | 8.2 | 0.0024 | 2026-10-30 | VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 unt | |
CVE-2026-67238 |
high | 7.1 | 0.0039 | 2026-10-30 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, rabbit_pi | |
CVE-2026-66067 |
medium | 6.0 | 0.0044 | 2026-10-30 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The strea | |
CVE-2026-66069 |
low | 2.3 | 0.0030 | 2026-10-30 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, | |
CVE-2026-67228 |
medium | 6.9 | 0.0032 | 2026-10-30 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The runti | |
CVE-2026-67240 |
low | 2.3 | 0.0037 | 2026-10-30 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, pattern_t | |
CVE-2026-89111 |
critical | 10.0 | 0.0037 | 2026-10-30 | The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant | |
CVE-2026-119777 |
high | 7.8 | 0.0019 | 2026-10-30 | A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malfor | |
CVE-2026-19654 |
high | 7.5 | 0.0059 | 2026-10-30 | A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imp | |
CVE-2026-119978 |
critical | 9.0 | 0.0032 | 2026-10-30 | Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated us | |
CVE-2025-8444 |
medium | 6.4 | 0.0019 | 2026-10-30 | The Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates plu | |
CVE-2026-118697 |
critical | 9.0 | 0.0027 | 2026-10-30 | In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, | |
CVE-2026-119086 |
medium | 6.5 | 0.0015 | 2026-10-30 | Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kerne | |
CVE-2026-118696 |
high | 8.0 | 0.0027 | 2026-10-30 | In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2 | |
CVE-2026-84243 |
high | 7.0 | 0.0030 | 2026-10-30 | The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE | |
CVE-2026-119979 |
high | 8.7 | 0.0040 | 2026-10-30 | LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader' | |
CVE-2026-119620 |
medium | 5.5 | 0.0045 | 2026-10-30 | A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66 | |
CVE-2026-63912 |
critical | 9.8 | 0.0071 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore co | |
CVE-2026-63913 |
high | 8.2 | 0.0097 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: | |
CVE-2026-63914 |
high | 7.3 | 0.0015 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: xfrm: route MIGRATE n | |
CVE-2026-63915 |
high | 8.8 | 0.0035 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: nfc: hci: fix out-of- | |
CVE-2026-63916 |
high | 8.8 | 0.0036 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB w | |
CVE-2026-63917 |
high | 8.8 | 0.0017 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl | |
CVE-2026-118527 |
— | — | — | 2026-10-30 | KEV | Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerab |
CVE-2026-93290 |
medium | 6.8 | 0.0011 | 2026-10-30 | Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to | |
CVE-2026-97638 |
high | 7.5 | 0.0056 | 2026-10-30 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPre | |
CVE-2026-9239 |
medium | 6.4 | 0.0032 | 2026-10-30 | The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Att | |
CVE-2026-76012 |
high | 7.5 | 0.0083 | 2026-10-30 | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is | |
CVE-2026-96894 |
high | 7.2 | 0.0037 | 2026-10-30 | The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is | |
CVE-2026-119619 |
medium | 5.5 | 0.0033 | 2026-10-30 | A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1 | |
CVE-2026-13747 |
medium | 6.5 | 0.0039 | 2026-10-30 | The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all version | |
CVE-2026-119113 |
medium | 6.4 | 0.0037 | 2026-10-30 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin f | |
CVE-2026-119176 |
medium | 6.4 | 0.0032 | 2026-10-30 | The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site | |
CVE-2026-118205 |
high | 7.4 | 0.0047 | 2026-10-30 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for Word | |
CVE-2026-118635 |
medium | 6.5 | 0.0043 | 2026-10-30 | The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plug | |
CVE-2026-115869 |
medium | 6.4 | 0.0030 | 2026-10-30 | The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via | |
CVE-2026-116552 |
medium | 4.7 | 0.0031 | 2026-10-30 | The Like Button Rating ♥ LikeBtn plugin for WordPress is vulnerable to Stored Cross-Site S | |
CVE-2026-115346 |
high | 8.1 | 0.0066 | 2026-10-30 | The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable | |
CVE-2026-115820 |
medium | 6.5 | 0.0042 | 2026-10-30 | The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for Wor | |
CVE-2026-112365 |
high | 7.2 | 0.0053 | 2026-10-30 | The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solut | |
CVE-2026-110001 |
medium | 5.4 | 0.0034 | 2026-10-30 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scr | |
CVE-2026-110305 |
high | 7.5 | 0.0061 | 2026-10-30 | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensitive Infor | |
CVE-2026-109592 |
medium | 4.3 | 0.0034 | 2026-10-30 | The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPres | |
CVE-2026-109984 |
medium | 5.4 | 0.0040 | 2026-10-30 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scr | |
CVE-2026-105894 |
high | 8.8 | 0.0032 | 2026-10-30 | The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordP |