Browse All CVEs
39,997 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-112104 |
medium | 6.9 | 0.0063 | 2026-10-29 | A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is | |
CVE-2026-112108 |
low | 2.1 | 0.0027 | 2026-10-29 | A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function | |
CVE-2026-112141 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf | |
CVE-2026-111883 |
medium | 5.3 | 0.0019 | 2026-10-29 | Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remo | |
CVE-2026-111936 |
medium | 5.3 | 0.0026 | 2026-10-29 | Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability beca | |
CVE-2026-112145 |
medium | 5.5 | 0.0043 | 2026-10-29 | A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This | |
CVE-2026-112263 |
high | 8.5 | 0.0066 | 2026-10-29 | Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that | |
CVE-2026-112268 |
medium | 5.3 | 0.0032 | 2026-10-29 | sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerabi | |
CVE-2026-112273 |
medium | 6.9 | 0.0056 | 2026-10-29 | libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name | |
CVE-2026-112278 |
high | 7.1 | 0.0031 | 2026-10-29 | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmp | |
CVE-2026-112283 |
medium | 6.8 | 0.0018 | 2026-10-29 | VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability | |
CVE-2026-112288 |
low | 2.1 | 0.0022 | 2026-10-29 | Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that al | |
CVE-2026-112293 |
medium | 5.3 | 0.0018 | 2026-10-29 | BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing authorization vulnerab | |
CVE-2026-112294 |
medium | 5.3 | 0.0020 | 2026-10-29 | FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionSer | |
CVE-2026-112295 |
medium | 5.3 | 0.0026 | 2026-10-29 | FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authen | |
CVE-2026-112296 |
critical | 9.3 | 0.0042 | 2026-10-29 | FlyCms through commit edfdf724 contains a default credentials vulnerability that allows un | |
CVE-2026-112150 |
medium | 5.5 | 0.0026 | 2026-10-29 | A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7 | |
CVE-2026-112329 |
medium | 5.3 | 0.0018 | 2026-10-29 | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerabili | |
CVE-2026-107081 |
critical | 9.8 | 0.0049 | 2026-10-29 | SQL injection via identifier injection in the tableName and tableFields POST parameters of | |
CVE-2026-109431 |
high | 8.6 | 0.0036 | 2026-10-29 | Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization c | |
CVE-2026-109433 |
medium | 6.0 | 0.0043 | 2026-10-29 | Camunda 7.24.0 before 7.24.16 and 7.23.0 before 7.23.17 contains an authorization bypass v | |
CVE-2026-111056 |
medium | 6.9 | 0.0029 | 2026-10-29 | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8 | |
CVE-2026-111057 |
critical | 10.0 | 0.0070 | 2026-10-29 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashbo | |
CVE-2026-112157 |
low | 1.3 | 0.0030 | 2026-10-29 | A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impac | |
CVE-2026-112304 |
high | 7.7 | 0.0037 | 2026-10-29 | docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_pa | |
CVE-2026-112309 |
high | 8.7 | 0.0040 | 2026-10-29 | @rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that all | |
CVE-2026-77225 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-77227 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-77228 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2024-4412 |
low | 2.7 | 0.0037 | 2026-10-29 | The software accepts user-supplied data without sufficient validation, allowing for the in | |
CVE-2025-7043 |
medium | 5.4 | 0.0018 | 2026-10-29 | The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh tok | |
CVE-2026-10572 |
high | 8.8 | 0.0045 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially e | |
CVE-2026-10574 |
high | 8.8 | 0.0044 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially e | |
CVE-2026-10743 |
high | 8.8 | 0.0028 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memor | |
CVE-2026-111063 |
medium | 6.3 | 0.0023 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3 | |
CVE-2026-111064 |
high | 8.2 | 0.0040 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3 | |
CVE-2026-111749 |
low | 2.3 | 0.0038 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3 | |
CVE-2026-111750 |
medium | 6.3 | 0.0038 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3 | |
CVE-2026-112193 |
low | 2.9 | 0.0048 | 2026-10-29 | A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown func | |
CVE-2026-11828 |
medium | 5.9 | 0.0025 | 2026-10-29 | IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle acces | |
CVE-2026-11829 |
medium | 6.5 | 0.0024 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service due to improper | |
CVE-2026-11831 |
medium | 5.4 | 0.0020 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a limited denial of service and obta | |
CVE-2026-12148 |
high | 8.8 | 0.0040 | 2026-10-29 | IBM MQ Operator could allow an authenticated attacker to cause a denial of service or pote | |
CVE-2026-12155 |
medium | 6.5 | 0.0026 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service by sending speci | |
CVE-2026-12343 |
medium | 6.5 | 0.0024 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service due to improper | |
CVE-2026-12350 |
medium | 6.5 | 0.0026 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service by sending a spe | |
CVE-2026-12660 |
low | 2.7 | 0.0024 | 2026-10-29 | IBM MQ Web Console could allow an authenticated administrator to write files outside the i | |
CVE-2026-71988 |
critical | 9.3 | 0.0246 | 2026-10-29 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71989 |
critical | 9.3 | 0.0246 | 2026-10-29 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71990 |
critical | 9.3 | 0.0246 | 2026-10-29 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili |