Browse All CVEs
33,204 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-8374 |
high | 8.5 | 0.0009 | 2026-10-30 | Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allow | |
CVE-2026-65566 |
high | 8.8 | 0.0017 | 2026-10-30 | Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cr | |
CVE-2026-62055 |
medium | 4.3 | 0.0027 | 2026-10-30 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets | |
CVE-2026-61789 |
medium | 6.1 | 0.0039 | 2026-10-30 | DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. P | |
CVE-2026-119365 |
medium | 6.5 | 0.0020 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-119367 |
medium | 5.4 | 0.0023 | 2026-10-30 | Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-even | |
CVE-2026-119148 |
high | 8.2 | 0.0017 | 2026-10-30 | Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a thir | |
CVE-2026-119298 |
medium | 4.2 | 0.0030 | 2026-10-30 | croc is a tool that allows any two computers to simply and securely transfer files and fol | |
CVE-2026-104623 |
medium | 6.3 | 0.0027 | 2026-10-30 | 1 PoC | A security vulnerability exists in the authorization handling for the local (management) c |
CVE-2025-49602 |
— | — | 0.0019 | 2026-10-30 | An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its ad | |
CVE-2026-119466 |
medium | 5.4 | 0.0013 | 2026-10-30 | Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooComm | |
CVE-2026-119299 |
medium | 5.9 | 0.0047 | 2026-10-30 | gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk ch | |
CVE-2026-119116 |
high | 7.8 | 0.0016 | 2026-10-30 | A use-after-free and double-free issue in the SetClient command handler of the kmstool-enc | |
CVE-2026-115642 |
high | 8.3 | 0.0051 | 2026-10-30 | In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token heade | |
CVE-2026-92207 |
high | 8.8 | 0.0070 | 2026-10-30 | MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. This vulnerability | |
CVE-2026-92206 |
high | 8.8 | 0.0046 | 2026-10-30 | CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerabilit | |
CVE-2026-117182 |
— | — | 0.0030 | 2026-10-30 | 1 PoC | An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb comp |
CVE-2026-62141 |
medium | 5.4 | 0.0018 | 2026-10-30 | Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exp | |
CVE-2026-105454 |
medium | 5.3 | 0.0044 | 2026-10-30 | RT's automatic link creation for URLs in HTML ticket content does not HTML-escape th | |
CVE-2026-105455 |
medium | 5.3 | 0.0041 | 2026-10-30 | RTIR's ticket creation forms show the subject of the related ticket when splitting a | |
CVE-2026-10843 |
high | 7.2 | 0.0033 | 2026-10-30 | A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM policies for AWS | |
CVE-2026-119287 |
high | 8.0 | 0.0022 | 2026-10-30 | Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, th | |
CVE-2026-119288 |
high | 7.0 | 0.0019 | 2026-10-30 | Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @z | |
CVE-2026-119290 |
high | 7.5 | 0.0046 | 2026-10-30 | Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @z | |
CVE-2026-119291 |
medium | 5.5 | 0.0014 | 2026-10-30 | Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.4.0, @zu | |
CVE-2026-104615 |
high | 7.9 | 0.0022 | 2026-10-30 | A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, | |
CVE-2026-119289 |
high | 7.1 | 0.0018 | 2026-10-30 | Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.10.0, th | |
CVE-2026-37171 |
critical | 9.6 | 0.0025 | 2026-10-30 | A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows | |
CVE-2025-70102 |
medium | 6.3 | 0.0018 | 2026-10-30 | A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while | |
CVE-2026-119479 |
medium | 5.3 | 0.0031 | 2026-10-30 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-118238 |
high | 7.2 | 0.0154 | 2026-10-30 | 1 PoC | The Tenda W18E web management server is vulnerable to OS command injection via the "diagno |
CVE-2026-119369 |
medium | 6.5 | 0.0022 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-116407 |
medium | 5.4 | 0.0024 | 2026-10-30 | Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allo | |
CVE-2026-117183 |
— | — | 0.0024 | 2026-10-30 | 1 PoC | A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 |
CVE-2026-119722 |
high | 8.5 | 0.0018 | 2026-10-30 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerabil | |
CVE-2026-119720 |
medium | 6.8 | 0.0013 | 2026-10-30 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerabilit | |
CVE-2026-119721 |
medium | 6.9 | 0.0017 | 2026-10-30 | Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in | |
CVE-2026-119718 |
high | 8.5 | 0.0019 | 2026-10-30 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability c | |
CVE-2026-119719 |
high | 8.5 | 0.0016 | 2026-10-30 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability i | |
CVE-2026-119716 |
critical | 9.2 | 0.0037 | 2026-10-30 | pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that | |
CVE-2026-119717 |
critical | 9.2 | 0.0056 | 2026-10-30 | pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that | |
CVE-2026-119714 |
medium | 6.9 | 0.0031 | 2026-10-30 | My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerabil | |
CVE-2026-119715 |
medium | 5.3 | 0.0022 | 2026-10-30 | NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to fr | |
CVE-2026-119712 |
medium | 5.3 | 0.0025 | 2026-10-30 | 1 PoC | PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser |
CVE-2026-119713 |
high | 8.7 | 0.0080 | 2026-10-30 | Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that | |
CVE-2026-119710 |
high | 7.1 | 0.0042 | 2026-10-30 | PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows au | |
CVE-2026-119711 |
medium | 6.9 | 0.0022 | 2026-10-30 | PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that al | |
CVE-2026-119708 |
high | 7.1 | 0.0030 | 2026-10-30 | abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypass in the B | |
CVE-2026-119709 |
medium | 6.9 | 0.0041 | 2026-10-30 | Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerabilit | |
CVE-2026-119706 |
critical | 9.3 | 0.0103 | 2026-10-30 | InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution v |