Browse All CVEs
1,794 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-95620 |
low | 2.1 | 0.0023 | 2026-10-29 | A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of th | |
CVE-2026-115730 |
low | 2.3 | 0.0022 | 2026-10-29 | i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUrl() that allows atta | |
CVE-2026-115752 |
low | 2.3 | 0.0018 | 2026-10-29 | Signal K Server from 2.28.0-beta.2 before 2.34.0 contains a server-side request forgery vu | |
CVE-2026-54711 |
low | 2.4 | 0.0016 | 2026-10-29 | pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud | |
CVE-2026-115754 |
low | 2.3 | 0.0023 | 2026-10-29 | serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scripting vulnerability | |
CVE-2026-106070 |
low | 3.7 | 0.0037 | 2026-10-29 | A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong t | |
CVE-2026-106071 |
low | 3.6 | 0.0020 | 2026-10-29 | A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that d | |
CVE-2026-106073 |
low | 3.3 | 0.0025 | 2026-10-29 | A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` witho | |
CVE-2026-115569 |
low | 3.3 | 0.0019 | 2026-10-29 | Fallow is a codebase intelligence tool for TypeScript and JavaScript. From 2.68.0 until 3. | |
CVE-2026-115796 |
low | 2.1 | 0.0016 | 2026-10-29 | A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown funct | |
CVE-2026-115797 |
low | 2.9 | 0.0020 | 2026-10-29 | A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of | |
CVE-2026-79978 |
low | 3.6 | 0.0009 | 2026-10-29 | The RTIO streaming completion callback adxl345_process_fifo_samples_cb() in drivers/sensor | |
CVE-2026-83813 |
low | 3.1 | 0.0011 | 2026-10-29 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Pri | |
CVE-2026-115801 |
low | 1.9 | 0.0011 | 2026-10-29 | A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the | |
CVE-2026-115897 |
low | 2.1 | 0.0031 | 2026-10-29 | Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regu | |
CVE-2026-113674 |
low | 3.7 | 0.0021 | 2026-10-29 | The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of l | |
CVE-2026-115802 |
low | 2.1 | 0.0029 | 2026-10-29 | A weakness has been identified in InternScience InternAgent 1.5.0. This affects the functi | |
CVE-2026-116012 |
low | 2.0 | 0.0021 | 2026-10-29 | Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttrib | |
CVE-2026-115982 |
low | 2.1 | 0.0027 | 2026-10-29 | A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the functio | |
CVE-2026-115997 |
low | 2.1 | 0.0023 | 2026-10-29 | A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.get | |
CVE-2026-116004 |
low | 2.0 | 0.0020 | 2026-10-29 | 1 PoC | A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is a |
CVE-2025-15705 |
low | 3.5 | 0.0014 | 2026-10-29 | The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape | |
CVE-2026-111981 |
low | 2.7 | 0.0017 | 2026-10-29 | The GiveWP WordPress plugin before 4.19.0.1 does not perform a capability check when hand | |
CVE-2026-114741 |
low | 3.8 | 0.0015 | 2026-10-29 | The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks | |
CVE-2026-114742 |
low | 2.7 | 0.0017 | 2026-10-29 | The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks whe | |
CVE-2026-114743 |
low | 3.1 | 0.0017 | 2026-10-29 | The InstaWP Connect WordPress plugin before 0.1.4.2 does not perform a capability check o | |
CVE-2026-115183 |
low | 2.4 | 0.0009 | 2026-10-29 | The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a wi | |
CVE-2026-116044 |
low | 2.1 | 0.0021 | 2026-10-29 | A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affec | |
CVE-2026-116045 |
low | 2.1 | 0.0032 | 2026-10-29 | A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the funct | |
CVE-2026-116047 |
low | 2.1 | 0.0026 | 2026-10-29 | A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some | |
CVE-2026-116145 |
low | 1.8 | 0.0011 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass cau | |
CVE-2026-116150 |
low | 2.3 | 0.0022 | 2026-10-29 | ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that a | |
CVE-2026-116153 |
low | 2.0 | 0.0012 | 2026-10-29 | ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit system | |
CVE-2026-116158 |
low | 2.0 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare com | |
CVE-2026-116162 |
low | 2.1 | 0.0038 | 2026-10-29 | Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request | |
CVE-2026-116184 |
low | 2.1 | 0.0024 | 2026-10-29 | OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm | |
CVE-2026-116186 |
low | 2.3 | 0.0021 | 2026-10-29 | OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-desce | |
CVE-2026-116197 |
low | 2.1 | 0.0016 | 2026-10-29 | Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry | |
CVE-2026-116054 |
low | 1.2 | 0.0021 | 2026-10-29 | A security vulnerability has been detected in SH3. This affects an unknown function of the | |
CVE-2026-116055 |
low | 2.1 | 0.0032 | 2026-10-29 | A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impa | |
CVE-2026-116057 |
low | 2.1 | 0.0033 | 2026-10-29 | A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulner | |
CVE-2026-116097 |
low | 2.1 | 0.0027 | 2026-10-29 | A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an | |
CVE-2026-116099 |
low | 2.1 | 0.0038 | 2026-10-29 | A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1 | |
CVE-2026-116100 |
low | 1.9 | 0.0020 | 2026-10-29 | A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of | |
CVE-2026-116101 |
low | 2.1 | 0.0020 | 2026-10-29 | A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected el | |
CVE-2026-116103 |
low | 2.1 | 0.0023 | 2026-10-29 | A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects | |
CVE-2026-116104 |
low | 2.1 | 0.0023 | 2026-10-29 | A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This im | |
CVE-2026-116107 |
low | 2.1 | 0.0022 | 2026-10-29 | A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. A | |
CVE-2026-116109 |
low | 2.1 | 0.0115 | 2026-10-29 | A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects t | |
CVE-2026-116111 |
low | 2.1 | 0.0031 | 2026-10-29 | A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the funct |