Browse All CVEs
1,825 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-8271 |
low | 2.0 | 0.0510 | 2026-10-29 | A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the func | |
CVE-2026-8272 |
low | 2.0 | 0.0614 | 2026-10-29 | A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function d | |
CVE-2026-8274 |
low | 1.9 | 0.0017 | 2026-10-29 | A security vulnerability has been detected in npitre cramfs-tools up to 2.1. Affected is t | |
CVE-2026-34086 |
low | 2.1 | 0.0024 | 2026-10-29 | Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * | |
CVE-2026-34088 |
low | 1.3 | 0.0029 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-34089 |
low | 2.3 | 0.0035 | 2026-10-29 | Vulnerability in Wikimedia Foundation Scribunto. This issue affects Scribunto: from 1.45. | |
CVE-2026-34092 |
low | 2.1 | 0.0024 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-34093 |
low | 1.1 | 0.0023 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-34094 |
low | 2.0 | 0.0017 | 2026-10-29 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p | |
CVE-2026-42865 |
low | 2.3 | 0.0023 | 2026-10-29 | Inbox Zero is an AI personal assistant for email. Prior to 2.29.3, the cleaner email strea | |
CVE-2026-44658 |
low | 2.4 | 0.0016 | 2026-10-29 | Zen is a firefox-based browser. Prior to 1.19.12b, RSS feed URLs entered by the user are v | |
CVE-2026-5266 |
low | 2.3 | 0.0025 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-43969 |
low | 2.1 | 0.0015 | 2026-10-29 | Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines co | |
CVE-2026-42874 |
low | 3.7 | 0.0022 | 2026-10-29 | Microdot is a minimalistic Python web framework. Prior to 2.6.1, the Response.set_cookie() | |
CVE-2026-8320 |
low | 2.0 | 0.0022 | 2026-10-29 | A security vulnerability has been detected in jishenghua jshERP up to 3.6. This affects th | |
CVE-2026-28910 |
low | 3.3 | 0.0012 | 2026-10-29 | This issue was addressed with improved permissions checking. This issue is fixed in macOS | |
CVE-2026-28957 |
low | 3.3 | 0.0012 | 2026-10-29 | An issue with app access to camera metadata was addressed with improved logic. This issue | |
CVE-2026-8344 |
low | 2.1 | 0.0347 | 2026-10-29 | A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this | |
CVE-2026-8345 |
low | 2.1 | 0.0347 | 2026-10-29 | A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210. Affec | |
CVE-2026-8346 |
low | 2.1 | 0.0340 | 2026-10-29 | A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the fu | |
CVE-2026-8349 |
low | 2.1 | 0.0031 | 2026-10-29 | A flaw has been found in omec-project amf up to 2.1.1. This vulnerability affects unknown | |
CVE-2026-45362 |
low | 3.2 | 0.0009 | 2026-10-29 | Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup f | |
CVE-2026-40131 |
low | 3.4 | 0.0017 | 2026-10-29 | SQL injection vulnerability exists in @sap/hdi-deploy package, where SQL queries are dynam | |
CVE-2026-32684 |
low | 2.9 | 0.0009 | 2026-10-29 | The application does not impose strict enough restrictions on directory access permissions | |
CVE-2026-43930 |
low | 2.1 | 0.0024 | 2026-10-29 | Parse Server is an open source backend that can be deployed to any infrastructure that can | |
CVE-2026-43514 |
low | 3.7 | 0.0035 | 2026-10-29 | Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. T | |
CVE-2026-41611 |
low | 3.3 | 0.0042 | 2026-10-29 | Improper neutralization of script-related html tags in a web page (basic xss) in Visual St | |
CVE-2026-34685 |
low | 3.4 | 0.0037 | 2026-10-29 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a | |
CVE-2026-44218 |
low | 3.0 | 0.0012 | 2026-10-29 | ciguard is a static security auditor for CI/CD pipelines. From 0.1.0 to 0.8.1, the publish | |
CVE-2026-44219 |
low | 3.7 | 0.0030 | 2026-10-29 | ciguard is a static security auditor for CI/CD pipelines. From 0.6.0 to 0.8.1, both SCA HT | |
CVE-2026-44220 |
low | 3.2 | 0.0021 | 2026-10-29 | ciguard is a static security auditor for CI/CD pipelines. From 0.8.0 to 0.8.1 , the discov | |
CVE-2026-44242 |
low | 3.7 | 0.0026 | 2026-10-29 | Micronaut Framework is a JVM-based full stack Java framework designed for building modular | |
CVE-2026-42158 |
low | 2.3 | 0.0021 | 2026-10-29 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investi | |
CVE-2026-44459 |
low | 3.8 | 0.0022 | 2026-10-29 | Hono is a Web application framework that provides support for any JavaScript runtime. Prio | |
CVE-2026-45028 |
low | 2.9 | 0.0014 | 2026-10-29 | Astro is a web framework. Astro versions prior to 6.1.10 used AES-GCM encryption to protec | |
CVE-2026-44582 |
low | 3.7 | 0.0022 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. From 13.4.6 to befo | |
CVE-2026-0238 |
low | 1.1 | 0.0010 | 2026-10-29 | A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to i | |
CVE-2026-33585 |
low | 3.8 | 0.0013 | 2026-10-29 | Improper management of the idle timeout parameter in the Keycloak interface of the Arqit S | |
CVE-2026-44515 |
low | 2.3 | 0.0019 | 2026-10-29 | Nextcloud News is an RSS/Atom feed reader. Prior to 28.3.0-beta.1, Nextcloud News allows a | |
CVE-2026-6923 |
low | 3.8 | 0.0012 | 2026-10-29 | A side-channel attack, which requires a physical presence to the TPM, can lead to extracti | |
CVE-2026-22706 |
low | 2.1 | 0.0034 | 2026-10-29 | Strapi is an open source headless content management system. In Strapi versions prior to 5 | |
CVE-2026-44589 |
low | 3.7 | 0.0017 | 2026-10-29 | Nuxt OG Image generates OG Images with Vue templates in Nuxt. The isBlockedUrl() denylist | |
CVE-2026-44638 |
low | 2.5 | 0.0013 | 2026-10-29 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1. | |
CVE-2026-8536 |
low | 3.1 | 0.0019 | 2026-10-29 | Insufficient validation of untrusted input in ReadingMode in Google Chrome on Mac prior to | |
CVE-2026-8545 |
low | 3.1 | 0.0016 | 2026-10-29 | Object corruption in Compositing in Google Chrome prior to 148.0.7778.168 allowed a remote | |
CVE-2026-8553 |
low | 3.1 | 0.0016 | 2026-10-29 | Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker w | |
CVE-2026-8554 |
low | 3.1 | 0.0017 | 2026-10-29 | Type Confusion in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remo | |
CVE-2026-8556 |
low | 3.1 | 0.0020 | 2026-10-29 | Inappropriate implementation in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 | |
CVE-2026-8572 |
low | 3.1 | 0.0016 | 2026-10-29 | Insufficient policy enforcement in Network in Google Chrome on Android prior to 148.0.7778 | |
CVE-2026-8578 |
low | 3.1 | 0.0016 | 2026-10-29 | Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remo |