Browse All CVEs
1,817 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-31369 |
low | 3.2 | 0.0010 | 2026-10-29 | PcManager is affected by type privilege bypass, successful exploitation of this vulnerabil | |
CVE-2026-27937 |
low | 3.1 | 0.0014 | 2026-10-29 | October is a Content Management System (CMS) and web platform. Prior to 3.7.16 and 4.1.16, | |
CVE-2026-29179 |
low | 3.3 | 0.0014 | 2026-10-29 | October is a Content Management System (CMS) and web platform. Prior to 3.7.16 and 4.1.16, | |
CVE-2026-6743 |
low | 2.0 | 0.0019 | 2026-10-29 | A vulnerability has been found in WebSystems WebTOTUM 2026. This impacts an unknown functi | |
CVE-2026-40878 |
low | 2.1 | 0.0080 | 2026-10-29 | mailcow: dockerized is an open source groupware/email suite based on docker. In versions p | |
CVE-2026-22001 |
low | 2.7 | 0.0026 | 2026-10-29 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information | |
CVE-2026-22007 |
low | 2.9 | 0.0012 | 2026-10-29 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edi | |
CVE-2026-22008 |
low | 3.7 | 0.0021 | 2026-10-29 | Vulnerability in Oracle Java SE (component: Libraries). The supported version that is af | |
CVE-2026-22014 |
low | 3.8 | 0.0019 | 2026-10-29 | Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: | |
CVE-2026-22018 |
low | 3.7 | 0.0027 | 2026-10-29 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edi | |
CVE-2026-34268 |
low | 2.9 | 0.0012 | 2026-10-29 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edi | |
CVE-2026-34312 |
low | 2.4 | 0.0020 | 2026-10-29 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that a | |
CVE-2026-35249 |
low | 3.2 | 0.0011 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-35250 |
low | 2.3 | 0.0011 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-6799 |
low | 2.1 | 0.0194 | 2026-10-29 | A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is | |
CVE-2026-6392 |
low | 2.7 | 0.0019 | 2026-10-29 | Tanium addressed an information disclosure vulnerability in Threat Response. | |
CVE-2026-6408 |
low | 2.7 | 0.0018 | 2026-10-29 | Tanium addressed an information disclosure vulnerability in Tanium Server. | |
CVE-2026-22746 |
low | 3.7 | 0.0022 | 2026-10-29 | Vulnerability in Spring Spring Security. If an application is using the UserDetails#isEnab | |
CVE-2026-6842 |
low | 2.5 | 0.0008 | 2026-10-29 | A flaw was found in nano. In environments with permissive umask settings, a local attacker | |
CVE-2026-35342 |
low | 3.3 | 0.0013 | 2026-10-29 | The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environmen | |
CVE-2026-35343 |
low | 3.3 | 0.0014 | 2026-10-29 | The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option whe | |
CVE-2026-35344 |
low | 3.3 | 0.0011 | 2026-10-29 | The dd utility in uutils coreutils suppresses errors during file truncation operations by | |
CVE-2026-35346 |
low | 3.3 | 0.0018 | 2026-10-29 | The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conv | |
CVE-2026-35353 |
low | 3.3 | 0.0010 | 2026-10-29 | The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m fl | |
CVE-2026-35362 |
low | 3.6 | 0.0018 | 2026-10-29 | The safe_traversal module in uutils coreutils, which provides protection against Time-of-C | |
CVE-2026-35367 |
low | 3.3 | 0.0011 | 2026-10-29 | The nohup utility in uutils coreutils creates its default output file, nohup.out, without | |
CVE-2026-35371 |
low | 3.3 | 0.0012 | 2026-10-29 | The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" outpu | |
CVE-2026-35375 |
low | 3.3 | 0.0014 | 2026-10-29 | A logic error in the split utility of uutils coreutils causes the corruption of output fil | |
CVE-2026-35377 |
low | 3.3 | 0.0010 | 2026-10-29 | A logic error in the env utility of uutils coreutils causes a failure to correctly parse c | |
CVE-2026-35378 |
low | 3.3 | 0.0016 | 2026-10-29 | A logic error in the expr utility of uutils coreutils causes the program to evaluate paren | |
CVE-2026-35379 |
low | 3.3 | 0.0015 | 2026-10-29 | A logic error in the tr utility of uutils coreutils causes the program to incorrectly defi | |
CVE-2026-35381 |
low | 3.3 | 0.0018 | 2026-10-29 | A logic error in the cut utility of uutils coreutils causes the utility to ignore the -s ( | |
CVE-2026-6019 |
low | 2.1 | 0.0021 | 2026-10-29 | http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for | |
CVE-2026-6874 |
low | 2.1 | 0.0026 | 2026-10-29 | A vulnerability was determined in ericc-ch copilot-api up to 0.7.0. This impacts an unknow | |
CVE-2026-6878 |
low | 2.9 | 0.0033 | 2026-10-29 | A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function mat | |
CVE-2026-41988 |
low | 2.5 | 0.0018 | 2026-10-29 | uuid before 14.0.0 can make unexpected writes when external output buffers are used, and t | |
CVE-2026-29051 |
low | 3.3 | 0.0017 | 2026-10-29 | melange allows users to build apk packages using declarative pipelines. Starting in versio | |
CVE-2026-41430 |
low | 1.3 | 0.0015 | 2026-10-29 | Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, m | |
CVE-2026-4313 |
low | 2.4 | 0.0059 | 2026-10-29 | AdaptiveGRC is vulnerable to Stored XSS via text type fields across the forms. Authenticat | |
CVE-2026-41140 |
low | 0.6 | 0.0029 | 2026-10-29 | Poetry is a dependency manager for Python. Prior to 2.3.4, the extractall() function in sr | |
CVE-2026-41321 |
low | 2.2 | 0.0024 | 2026-10-29 | @astrojs/cloudflare is an SSR adapter for use with Cloudflare Workers targets. Prior to 13 | |
CVE-2026-41488 |
low | 3.1 | 0.0016 | 2026-10-29 | LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14 | |
CVE-2026-6979 |
low | 2.1 | 0.0025 | 2026-10-29 | A flaw has been found in devlikeapro WAHA up to 2026.3.4. This affects an unknown function | |
CVE-2026-6981 |
low | 2.1 | 0.0025 | 2026-10-29 | A vulnerability was found in IhateCreatingUserNames2 AiraHub2 up to 3e4b77fd7d48ed811ffe5b | |
CVE-2026-6984 |
low | 2.0 | 0.0030 | 2026-10-29 | A security flaw has been discovered in AstrBotDevs AstrBot up to 4.22.1. This affects the | |
CVE-2026-6986 |
low | 2.9 | 0.0022 | 2026-10-29 | A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affe | |
CVE-2026-6989 |
low | 2.1 | 0.0318 | 2026-10-29 | A vulnerability has been found in Tenda F453 up to 1.0.0.3. Impacted is the function Tenda | |
CVE-2026-6990 |
low | 2.0 | 0.0025 | 2026-10-29 | A vulnerability was found in projeto-siga siga 11.0.3.18. The affected element is an unkno | |
CVE-2026-6991 |
low | 2.1 | 0.0023 | 2026-10-29 | A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an u | |
CVE-2026-6995 |
low | 1.9 | 0.0024 | 2026-10-29 | A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacte |