Browse All CVEs
39,840 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-72543 |
high | 7.5 | 0.0061 | 2026-10-29 | An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 | |
CVE-2026-72544 |
high | 7.5 | 0.0025 | 2026-10-29 | An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows una | |
CVE-2026-72545 |
high | 7.5 | 0.0054 | 2026-10-29 | An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 | |
CVE-2026-72546 |
high | 7.1 | 0.0028 | 2026-10-29 | An insecure direct object reference vulnerability in Attendize through commit 9289acb allo | |
CVE-2026-72547 |
high | 7.1 | 0.0028 | 2026-10-29 | An insecure direct object reference vulnerability in Attendize through commit 9289acb allo | |
CVE-2026-72548 |
high | 7.5 | 0.0061 | 2026-10-29 | An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows una | |
CVE-2026-72549 |
medium | 5.3 | 0.0048 | 2026-10-29 | An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows una | |
CVE-2026-72550 |
critical | 9.8 | 0.0061 | 2026-10-29 | An SQL injection vulnerability in Friendica through the 2026.08-dev branch allows unauthen | |
CVE-2026-72551 |
high | 8.8 | 0.0101 | 2026-10-29 | A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with | |
CVE-2026-72552 |
high | 7.5 | 0.0061 | 2026-10-29 | A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated | |
CVE-2026-72553 |
medium | 5.4 | 0.0023 | 2026-10-29 | A stored cross-site scripting vulnerability in ElkArte Forum 2.0 Beta 1 allows any registe | |
CVE-2026-72554 |
medium | 6.5 | 0.0037 | 2026-10-29 | A broken access control vulnerability in Ladybird Web Solution Faveo Helpdesk 2.0.3 allows | |
CVE-2026-72555 |
high | 8.1 | 0.0037 | 2026-10-29 | A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 | |
CVE-2026-72556 |
high | 8.8 | 0.0101 | 2026-10-29 | A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user | |
CVE-2026-72557 |
high | 8.8 | 0.0048 | 2026-10-29 | An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users | |
CVE-2026-72558 |
high | 8.8 | 0.0043 | 2026-10-29 | An SQL injection vulnerability in CiviCRM through 6.18.alpha1 allows authenticated staff t | |
CVE-2026-72559 |
medium | 5.4 | 0.0023 | 2026-10-29 | A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspac | |
CVE-2026-72560 |
medium | 6.5 | 0.0034 | 2026-10-29 | A server-side request forgery vulnerability in HumanSignal Label Studio through 1.24.0.dev | |
CVE-2026-72561 |
high | 8.8 | 0.0042 | 2026-10-29 | A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 | |
CVE-2026-72562 |
high | 8.8 | 0.0043 | 2026-10-29 | An SQL injection vulnerability in Pimcore admin-ui-classic-bundle through version 2.3 allo | |
CVE-2026-72563 |
high | 8.1 | 0.0035 | 2026-10-29 | A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any aut | |
CVE-2026-72595 |
high | 8.1 | 0.0035 | 2026-10-29 | A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any aut | |
CVE-2026-72596 |
high | 8.1 | 0.0038 | 2026-10-29 | A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated A | |
CVE-2026-72597 |
medium | 6.5 | 0.0034 | 2026-10-29 | A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch al | |
CVE-2026-72598 |
medium | 6.5 | 0.0037 | 2026-10-29 | A server-side request forgery vulnerability in Apioo Fusio 8.8.3 allows authenticated cons | |
CVE-2026-72599 |
critical | 9.8 | 0.0061 | 2026-10-29 | An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to ex | |
CVE-2026-72600 |
high | 7.5 | 0.0061 | 2026-10-29 | A broken access control vulnerability in Idurar IDURAR ERP CRM 4.1.0 allows unauthenticate | |
CVE-2026-72601 |
high | 7.5 | 0.0061 | 2026-10-29 | A broken access control vulnerability in CSZ CMS 1.3.2 allows unauthenticated remote attac | |
CVE-2026-72602 |
high | 7.5 | 0.0074 | 2026-10-29 | A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows | |
CVE-2026-72603 |
critical | 9.9 | 0.0223 | 2026-10-29 | An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.crea | |
CVE-2026-72604 |
medium | 6.5 | 0.0052 | 2026-10-29 | A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticat | |
CVE-2026-72605 |
high | 7.5 | 0.0054 | 2026-10-29 | A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote | |
CVE-2026-72606 |
high | 7.5 | 0.0048 | 2026-10-29 | A server-side request forgery vulnerability in Pinry through 2.1.13 allows unauthenticated | |
CVE-2026-72607 |
high | 7.1 | 0.0045 | 2026-10-29 | A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26. | |
CVE-2026-72608 |
medium | 6.5 | 0.0038 | 2026-10-29 | A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26. | |
CVE-2026-72609 |
high | 7.1 | 0.0037 | 2026-10-29 | An SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 | |
CVE-2026-72610 |
medium | 4.3 | 0.0034 | 2026-10-29 | A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26. | |
CVE-2026-18972 |
critical | 9.6 | 0.0035 | 2026-10-29 | An authenticated attacker can spoof another GUI user's identity by sending their request w | |
CVE-2026-57262 |
high | 7.0 | 0.0015 | 2026-10-29 | A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected pr | |
CVE-2026-57263 |
high | 7.0 | 0.0011 | 2026-10-29 | A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project | |
CVE-2026-58115 |
critical | 10.0 | 0.0089 | 2026-10-29 | 2 PoC | A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All |
CVE-2026-59086 |
high | 7.3 | 0.0015 | 2026-10-29 | A vulnerability has been identified in Simcenter Femap (All versions < V2606), Simcenter N | |
CVE-2026-59700 |
high | 7.3 | 0.0015 | 2026-10-29 | A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The af | |
CVE-2026-59701 |
high | 7.3 | 0.0015 | 2026-10-29 | A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The af | |
CVE-2026-69108 |
high | 8.3 | 0.0017 | 2026-10-29 | A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). | |
CVE-2026-69109 |
high | 8.7 | 0.0062 | 2026-10-29 | A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). | |
CVE-2026-72747 |
medium | 5.1 | 0.0035 | 2026-10-29 | AVideo fails to sanitize the phone field during user registration, allowing unauthenticate | |
CVE-2026-72748 |
medium | 6.9 | 0.0119 | 2026-10-29 | AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoder | |
CVE-2026-72749 |
high | 7.1 | 0.0057 | 2026-10-29 | n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in th | |
CVE-2026-72750 |
medium | 5.3 | 0.0047 | 2026-10-29 | n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snow |