Browse All CVEs
50,446 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-55613 |
medium | 6.9 | 0.0040 | 2026-10-30 | uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ubus_data_send()` in | |
CVE-2026-16760 |
high | 8.8 | 0.0046 | 2026-10-30 | In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds a | |
CVE-2026-118938 |
high | 8.8 | 0.0048 | 2026-10-30 | In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted | |
CVE-2026-111578 |
high | 7.5 | 0.0030 | 2026-10-30 | The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from 5.16.2 before 5.16. | |
CVE-2026-62991 |
medium | 6.5 | 0.0024 | 2026-10-30 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1, the customer detail route ` | |
CVE-2026-62990 |
high | 8.7 | 0.0024 | 2026-10-30 | Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.10.1 and i | |
CVE-2026-62989 |
high | 8.1 | 0.0028 | 2026-10-30 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0, the Variants Livewire compo | |
CVE-2026-62979 |
high | 8.4 | 0.0036 | 2026-10-30 | jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Pri | |
CVE-2026-62967 |
high | 8.1 | 0.0037 | 2026-10-30 | ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support | |
CVE-2026-62297 |
high | 7.5 | 0.0034 | 2026-10-30 | ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before th | |
CVE-2026-59993 |
medium | 6.5 | 0.0025 | 2026-10-30 | Picotls is a TLS protocol library that allows users select different crypto backends based | |
CVE-2026-107161 |
high | 7.5 | 0.0038 | 2026-10-30 | A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function | |
CVE-2026-62853 |
critical | 9.9 | 0.0041 | 2026-10-30 | ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerS | |
CVE-2026-62849 |
critical | 9.1 | 0.0050 | 2026-10-30 | ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection | |
CVE-2026-119342 |
medium | 5.3 | 0.0043 | 2026-10-30 | Stirling-PDF is a locally hosted web application that facilitates various operations on PD | |
CVE-2026-119341 |
none | — | 0.0027 | 2026-10-30 | Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/a | |
CVE-2026-117645 |
medium | 5.3 | 0.0032 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-62864 |
high | 7.5 | 0.0034 | 2026-10-30 | Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack. Prio | |
CVE-2026-62863 |
critical | 9.6 | 0.0031 | 2026-10-30 | MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing run | |
CVE-2026-62254 |
medium | 5.5 | 0.0016 | 2026-10-30 | LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially craft | |
CVE-2026-40573 |
high | 8.6 | 0.0013 | 2026-10-30 | NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to vers | |
CVE-2026-119343 |
medium | 6.8 | 0.0028 | 2026-10-30 | Stirling-PDF is a locally hosted web application that facilitates various operations on PD | |
CVE-2026-62860 |
medium | 5.3 | 0.0024 | 2026-10-30 | Picsou is a self-hosted personal finance dashboard. In the affected login implementation, | |
CVE-2026-62250 |
medium | 5.5 | 0.0016 | 2026-10-30 | LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pr | |
CVE-2026-54610 |
low | 3.3 | 0.0012 | 2026-10-30 | LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV_to_utf8() | |
CVE-2026-62968 |
high | 8.7 | 0.0043 | 2026-10-30 | Dream Displays provides in-game screens for streaming videos in Minecraft. From 1.5.0 unti | |
CVE-2026-62965 |
high | 7.0 | 0.0034 | 2026-10-30 | SABnzbd is an open source automated Usenet download tool. Prior to 5.1.0Beta3, orphan-job | |
CVE-2026-62958 |
high | 7.9 | 0.0021 | 2026-10-30 | 1 PoC | libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause o |
CVE-2026-62966 |
high | 7.5 | 0.0043 | 2026-10-30 | ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, | |
CVE-2026-110899 |
high | 7.1 | 0.0022 | 2026-10-30 | 1 PoC | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne |
CVE-2026-109697 |
medium | 6.5 | 0.0014 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-62300 |
medium | 6.5 | 0.0025 | 2026-10-30 | Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP ser | |
CVE-2026-58412 |
high | 8.2 | 0.0023 | 2026-10-30 | Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP ser | |
CVE-2026-119339 |
medium | 5.5 | 0.0016 | 2026-10-30 | Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a | |
CVE-2026-119338 |
medium | 6.9 | 0.0014 | 2026-10-30 | Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/a | |
CVE-2026-62848 |
high | 7.3 | 0.0019 | 2026-10-30 | Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023 | |
CVE-2026-62847 |
high | 8.2 | 0.0015 | 2026-10-30 | Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to | |
CVE-2026-119340 |
medium | 5.5 | 0.0012 | 2026-10-30 | Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize | |
CVE-2026-117666 |
critical | 9.1 | 0.0019 | 2026-10-30 | Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_v | |
CVE-2026-62337 |
medium | 6.9 | 0.0030 | 2026-10-30 | SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circu | |
CVE-2026-62335 |
medium | 6.9 | 0.0038 | 2026-10-30 | OpenVM is a performant and modular zkVM framework built for customization and extensibilit | |
CVE-2026-62334 |
high | 8.7 | 0.0053 | 2026-10-30 | OpenVM is a performant and modular zkVM framework built for customization and extensibilit | |
CVE-2026-62333 |
high | 8.7 | 0.0040 | 2026-10-30 | OpenVM is a performant and modular zkVM framework built for customization and extensibilit | |
CVE-2026-61694 |
low | 3.7 | 0.0027 | 2026-10-30 | go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through the June 18 | |
CVE-2026-61620 |
critical | 9.8 | 0.0039 | 2026-10-30 | HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications t | |
CVE-2026-61618 |
medium | 6.9 | 0.0037 | 2026-10-30 | SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator public-insta | |
CVE-2026-55098 |
medium | 6.5 | 0.0032 | 2026-10-30 | Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-ver | |
CVE-2026-119337 |
high | 7.1 | 0.0034 | 2026-10-30 | RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. From 0.25.2 until 0 | |
CVE-2026-119336 |
high | 7.8 | 0.0025 | 2026-10-30 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing a | |
CVE-2026-119335 |
high | 7.8 | 0.0023 | 2026-10-30 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing a |