Browse All CVEs
40,867 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-76604 |
critical | 10.0 | 0.0070 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form eleme | |
CVE-2026-76605 |
critical | 10.0 | 0.0070 | 2026-10-29 | Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7. | |
CVE-2026-76606 |
critical | 10.0 | 0.0050 | 2026-10-29 | Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2. | |
CVE-2026-76607 |
critical | 10.0 | 0.0041 | 2026-10-29 | Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2. | |
CVE-2026-76608 |
medium | 6.9 | 0.0041 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email addr | |
CVE-2026-76609 |
medium | 6.9 | 0.0041 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < | |
CVE-2026-77027 |
high | 8.6 | 0.0044 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handl | |
CVE-2026-77992 |
critical | 9.5 | 0.0044 | 2026-10-29 | Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabri | |
CVE-2026-74632 |
high | 7.8 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix h | |
CVE-2026-74672 |
— | — | 0.0018 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire i | |
CVE-2026-78054 |
low | 2.1 | 0.0033 | 2026-10-29 | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Af | |
CVE-2026-78055 |
low | 2.1 | 0.0047 | 2026-10-29 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling Sy | |
CVE-2026-78115 |
low | 2.1 | 0.0040 | 2026-10-29 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Af | |
CVE-2026-8630 |
medium | 5.1 | 0.0026 | 2026-10-29 | justhtml before 1.12.0 (versions <= 1.11.0) contains a mutation cross-site scripting (mXSS | |
CVE-2026-78171 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by | |
CVE-2026-78185 |
low | 2.1 | 0.0033 | 2026-10-29 | A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted | |
CVE-2026-78200 |
low | 2.1 | 0.0033 | 2026-10-29 | A flaw has been found in itsourcecode Library Management System 1.0. The affected element | |
CVE-2026-78201 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is | |
CVE-2026-78202 |
medium | 5.5 | 0.0050 | 2026-10-29 | A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function sa | |
CVE-2026-77993 |
medium | 5.3 | 0.0044 | 2026-10-29 | Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla ext | |
CVE-2026-77994 |
critical | 9.3 | 0.0039 | 2026-10-29 | Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - T | |
CVE-2026-66897 |
critical | 9.9 | 0.0072 | 2026-10-29 | A path traversal vulnerability in LXD's instance template processing allows an attacker wi | |
CVE-2026-78314 |
high | 8.8 | 0.0066 | 2026-10-29 | SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. | |
CVE-2026-28151 |
high | 8.1 | 0.0047 | 2026-10-29 | Unauthenticated Local File Inclusion in Tonda < 2.6 versions. | |
CVE-2026-28152 |
high | 8.1 | 0.0047 | 2026-10-29 | Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions. | |
CVE-2026-28167 |
high | 7.5 | 0.0050 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-66585 |
high | 7.5 | 0.0042 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions. | |
CVE-2026-66587 |
critical | 9.8 | 0.0050 | 2026-10-29 | Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions. | |
CVE-2026-78258 |
medium | 5.3 | 0.0031 | 2026-10-29 | Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions. | |
CVE-2026-77995 |
critical | 10.0 | 0.0041 | 2026-10-29 | Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client | |
CVE-2026-78376 |
high | 8.8 | 0.0047 | 2026-10-29 | A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free | |
CVE-2026-66907 |
high | 7.5 | 0.0081 | 2026-10-29 | Relative path traversal vulnerability in Apache Camel Google Storage component. This is | |
CVE-2026-66908 |
high | 7.5 | 0.0061 | 2026-10-29 | Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. Thi | |
CVE-2026-75370 |
medium | 6.5 | 0.0036 | 2026-10-29 | An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader componen | |
CVE-2020-37268 |
medium | 6.8 | 0.0018 | 2026-10-29 | Print Assumptions does not report that a definition was produced while universe checking w | |
CVE-2026-72703 |
medium | 6.8 | 0.0018 | 2026-10-29 | The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform | |
CVE-2026-72704 |
medium | 6.8 | 0.0018 | 2026-10-29 | The guard checker in Rocq Prover does not recheck the recursive tree representation of an | |
CVE-2026-72705 |
medium | 6.8 | 0.0018 | 2026-10-29 | The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's | |
CVE-2026-72711 |
medium | 6.8 | 0.0018 | 2026-10-29 | The Lean 4 kernel does not check that the body of an opaque declaration is closed. environ | |
CVE-2026-72714 |
medium | 6.8 | 0.0018 | 2026-10-29 | Rocq Prover does not restore the universe graph's copy of the universe checking flag when | |
CVE-2026-32560 |
high | 8.8 | 0.0046 | 2026-10-29 | Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and | |
CVE-2026-32563 |
critical | 9.8 | 0.0056 | 2026-10-29 | Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= | |
CVE-2026-19949 |
high | 8.8 | 0.0096 | 2026-10-29 | The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection | |
CVE-2024-58377 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
CVE-2024-58378 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
CVE-2026-81028 |
medium | 6.9 | 0.0052 | 2026-10-29 | ZLMediaKit confines the downloadFile API to a configured set of root directories with a pr | |
CVE-2025-29419 |
high | 7.1 | 0.0029 | 2026-10-29 | CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack. | |
CVE-2025-56798 |
high | 8.8 | 0.0032 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS versi | |
CVE-2025-61162 |
high | 7.5 | 0.0036 | 2026-10-29 | Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwri | |
CVE-2025-61163 |
critical | 9.8 | 0.0036 | 2026-10-29 | Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain polic |