Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-107060 |
critical | 9.1 | 0.0028 | 2026-10-29 | Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to m | |
CVE-2026-107059 |
high | 7.5 | 0.0033 | 2026-10-29 | An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logou | |
CVE-2026-107058 |
critical | 9.8 | 0.0049 | 2026-10-29 | An issue in Shelter versionCode 445 allows attackers to register their own auth_key and ex | |
CVE-2026-107057 |
critical | 9.8 | 0.0039 | 2026-10-29 | An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploa | |
CVE-2026-107056 |
critical | 9.1 | 0.0027 | 2026-10-29 | Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versio | |
CVE-2026-84392 |
low | 2.7 | 0.0107 | 2026-10-29 | A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 a | |
CVE-2026-84387 |
high | 7.2 | 0.0156 | 2026-10-29 | An Improper Neutralization of Special Elements used in a Command ('Command Injection') vul | |
CVE-2026-106175 |
low | 2.3 | 0.0010 | 2026-10-29 | A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6. | |
CVE-2026-118758 |
high | 7.5 | 0.0053 | 2026-10-29 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-107047 |
high | 7.5 | 0.0043 | 2026-10-29 | Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to | |
CVE-2026-107046 |
medium | 5.3 | 0.0028 | 2026-10-29 | A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPo | |
CVE-2026-107045 |
critical | 9.1 | 0.0034 | 2026-10-29 | Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCod | |
CVE-2026-107044 |
high | 7.5 | 0.0031 | 2026-10-29 | Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized | |
CVE-2026-107043 |
critical | 9.1 | 0.0030 | 2026-10-29 | Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbit | |
CVE-2026-62374 |
high | 7.1 | 0.0023 | 2026-10-29 | SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specific | |
CVE-2026-107048 |
critical | 9.8 | 0.0054 | 2026-10-29 | An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 1 | |
CVE-2025-12523 |
medium | 6.5 | 0.0021 | 2026-10-29 | Broken Object Level Authorization in Users Configuration Endpoint allows Information Discl | |
CVE-2026-90872 |
medium | 6.6 | 0.0029 | 2026-10-29 | Improper neutralization of directives in dynamically evaluated code in the Manager web con | |
CVE-2026-119145 |
critical | 9.4 | 0.0076 | 2026-10-29 | Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability bec | |
CVE-2026-119144 |
high | 8.7 | 0.0031 | 2026-10-29 | Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template i | |
CVE-2026-119143 |
medium | 5.9 | 0.0021 | 2026-10-29 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulner | |
CVE-2026-119142 |
medium | 5.9 | 0.0025 | 2026-10-29 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulner | |
CVE-2026-119141 |
medium | 6.9 | 0.0037 | 2026-10-29 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulner | |
CVE-2026-119140 |
medium | 5.9 | 0.0021 | 2026-10-29 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulner | |
CVE-2026-119139 |
medium | 5.9 | 0.0021 | 2026-10-29 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in co | |
CVE-2026-119138 |
medium | 5.9 | 0.0025 | 2026-10-29 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulner | |
CVE-2026-119137 |
medium | 6.9 | 0.0040 | 2026-10-29 | Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a stack overflow vulnerabi | |
CVE-2026-119136 |
medium | 5.9 | 0.0021 | 2026-10-29 | Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Sto | |
CVE-2026-119135 |
medium | 5.9 | 0.0021 | 2026-10-29 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a compon | |
CVE-2026-119134 |
medium | 6.9 | 0.0015 | 2026-10-29 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 caps component-mod | |
CVE-2026-119133 |
low | 2.1 | 0.0021 | 2026-10-29 | Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw | |
CVE-2026-119132 |
medium | 5.9 | 0.0021 | 2026-10-29 | Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows | |
CVE-2026-119131 |
medium | 6.9 | 0.0030 | 2026-10-29 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulner | |
CVE-2026-119130 |
low | 2.1 | 0.0024 | 2026-10-29 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify th | |
CVE-2026-119129 |
high | 8.6 | 0.0028 | 2026-10-29 | ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 contains a missing authorization vuln | |
CVE-2026-119128 |
critical | 9.1 | 0.0029 | 2026-10-29 | ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V | |
CVE-2026-119127 |
high | 8.6 | 0.0028 | 2026-10-29 | ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 | |
CVE-2026-119126 |
low | 2.3 | 0.0026 | 2026-10-29 | Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles dot notation keys w | |
CVE-2026-119125 |
low | 2.3 | 0.0025 | 2026-10-29 | Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 returns the stored value of a | |
CVE-2026-119124 |
medium | 4.8 | 0.0013 | 2026-10-29 | ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing | |
CVE-2026-119123 |
medium | 6.3 | 0.0035 | 2026-10-29 | ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder th | |
CVE-2026-119122 |
medium | 6.9 | 0.0037 | 2026-10-29 | Crawl4AI before 0.9.5 contains a blind server-side request forgery vulnerability in the Do | |
CVE-2026-119121 |
medium | 5.3 | 0.0029 | 2026-10-29 | Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulnerability in the Dock | |
CVE-2026-119120 |
high | 7.7 | 0.0042 | 2026-10-29 | Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in un | |
CVE-2026-119119 |
high | 8.7 | 0.0036 | 2026-10-29 | Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server | |
CVE-2026-119118 |
high | 8.3 | 0.0019 | 2026-10-29 | Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allow | |
CVE-2026-118673 |
medium | 4.1 | 0.0011 | 2026-10-29 | KeePassXC is a cross-platform community-driven port of the Windows application KeePass Pas | |
CVE-2026-107042 |
high | 7.5 | 0.0036 | 2026-10-29 | Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unau | |
CVE-2025-13050 |
medium | 5.4 | 0.0026 | 2026-10-29 | Broken Function Level Authorization allows execution of poller post-restart commands by au | |
CVE-2026-101421 |
high | 7.5 | 0.0040 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo |