Browse All CVEs
40,064 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-110860 |
medium | 6.9 | 0.0019 | 2026-10-29 | GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), | |
CVE-2026-110865 |
high | 7.1 | 0.0019 | 2026-10-29 | Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository | |
CVE-2026-110870 |
medium | 6.9 | 0.0027 | 2026-10-29 | Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability i | |
CVE-2026-76066 |
high | 8.7 | 0.0044 | 2026-10-29 | IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnera | |
CVE-2026-77931 |
high | 8.7 | 0.0100 | 2026-10-29 | MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers | |
CVE-2024-22031 |
high | 8.5 | 0.0043 | 2026-10-29 | A vulnerability has been identified within Rancher where a user with the ability to create | |
CVE-2026-98432 |
critical | 9.8 | 0.0076 | 2026-10-29 | 68 PoC | In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt a |
CVE-2026-52167 |
medium | 6.2 | 0.0013 | 2026-10-29 | A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers | |
CVE-2026-77468 |
medium | 6.9 | 0.0037 | 2026-10-29 | Lychee is a free, open-source photo-management tool. Prior to 7.7.0, GET /docs/api exposes | |
CVE-2026-78850 |
medium | 5.0 | 0.0033 | 2026-10-29 | An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via t | |
CVE-2026-54683 |
medium | 6.5 | 0.0042 | 2026-10-29 | NL Portal Backend Libraries provide backend components for Dutch government portals that i | |
CVE-2026-55103 |
high | 8.6 | 0.0020 | 2026-10-29 | Discourse ActivityPub adds ActivityPub support to Discourse. Prior to commit 1c8518b0f2abd | |
CVE-2026-61702 |
medium | 5.3 | 0.0042 | 2026-10-29 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operatin | |
CVE-2026-108334 |
high | 7.4 | 0.0034 | 2026-10-29 | A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. Wh | |
CVE-2026-110875 |
medium | 6.9 | 0.0014 | 2026-10-29 | AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ks | |
CVE-2026-111124 |
medium | 6.9 | 0.0024 | 2026-10-29 | CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcomp | |
CVE-2026-111129 |
medium | 6.8 | 0.0013 | 2026-10-29 | Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulne | |
CVE-2026-111134 |
medium | 6.9 | 0.0013 | 2026-10-29 | libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_f | |
CVE-2026-111139 |
medium | 6.8 | 0.0013 | 2026-10-29 | NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_ | |
CVE-2026-111144 |
medium | 6.8 | 0.0013 | 2026-10-29 | libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansil | |
CVE-2026-111147 |
medium | 6.9 | 0.0013 | 2026-10-29 | Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libes | |
CVE-2026-111149 |
medium | 6.9 | 0.0013 | 2026-10-29 | FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability | |
CVE-2026-111154 |
medium | 6.9 | 0.0013 | 2026-10-29 | libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundF | |
CVE-2026-111159 |
medium | 6.9 | 0.0013 | 2026-10-29 | libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_ext | |
CVE-2026-111164 |
medium | 6.8 | 0.0013 | 2026-10-29 | UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amif | |
CVE-2026-111169 |
low | 2.3 | 0.0027 | 2026-10-29 | La Suite Docs through 6.0.1 contains an authorization bypass vulnerability that allows aut | |
CVE-2026-111216 |
high | 8.6 | 0.0472 | 2026-10-29 | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allow | |
CVE-2026-111221 |
high | 7.5 | 0.0094 | 2026-10-29 | Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that all | |
CVE-2026-111226 |
high | 8.6 | 0.0655 | 2026-10-29 | pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows | |
CVE-2026-111231 |
high | 8.6 | 0.0084 | 2026-10-29 | Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allow | |
CVE-2026-55240 |
critical | 9.1 | 0.0075 | 2026-10-29 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior t | |
CVE-2026-55587 |
high | 8.1 | 0.0015 | 2026-10-29 | AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29 | |
CVE-2026-57183 |
medium | 6.1 | 0.0030 | 2026-10-29 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth( | |
CVE-2026-62322 |
medium | 6.5 | 0.0015 | 2026-10-29 | Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the | |
CVE-2026-109468 |
high | 7.5 | 0.0095 | 2026-10-29 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorize | |
CVE-2024-58397 |
medium | 6.9 | 0.0020 | 2026-10-29 | MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters() tha | |
CVE-2026-111269 |
medium | 6.9 | 0.0024 | 2026-10-29 | libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_st | |
CVE-2026-111274 |
medium | 6.8 | 0.0020 | 2026-10-29 | unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() i | |
CVE-2026-111280 |
high | 8.3 | 0.0051 | 2026-10-29 | snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::op | |
CVE-2026-111312 |
critical | 9.2 | 0.0059 | 2026-10-29 | OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability | |
CVE-2026-111332 |
medium | 6.3 | 0.0035 | 2026-10-29 | OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows | |
CVE-2026-111352 |
high | 8.7 | 0.0046 | 2026-10-29 | ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseC | |
CVE-2026-84823 |
high | 7.1 | 0.0042 | 2026-10-29 | A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard | |
CVE-2026-111379 |
high | 7.0 | 0.0019 | 2026-10-29 | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_re | |
CVE-2026-111384 |
high | 7.1 | 0.0036 | 2026-10-29 | Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file | |
CVE-2026-109219 |
critical | 9.8 | 0.0069 | 2026-10-29 | The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in version 2.4. | |
CVE-2026-19076 |
medium | 4.9 | 0.0020 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8 | |
CVE-2026-19600 |
medium | 4.9 | 0.0024 | 2026-10-29 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.1 | |
CVE-2026-19621 |
medium | 6.5 | 0.0026 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8 | |
CVE-2026-110287 |
medium | 4.3 | 0.0019 | 2026-10-29 | Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and ear |