Browse All CVEs
10,484 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-118586 |
medium | 6.9 | 0.0031 | 2026-10-29 | A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the | |
CVE-2026-118589 |
medium | 6.9 | 0.0040 | 2026-10-29 | A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown funct | |
CVE-2026-118590 |
medium | 6.9 | 0.0042 | 2026-10-29 | A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected eleme | |
CVE-2026-56164 |
medium | 5.3 | 0.0101 | 2026-10-29 | KEV 2 PoC | Microsoft SharePoint contains a missing authentication for critical function vulnerability |
CVE-2026-108360 |
medium | 6.4 | 0.0034 | 2026-10-29 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1 | |
CVE-2026-114609 |
medium | 5.8 | 0.0025 | 2026-10-29 | fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader au | |
CVE-2026-114610 |
medium | 6.5 | 0.0046 | 2026-10-29 | fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fpdf2's SVGObject.buil | |
CVE-2026-13599 |
medium | 5.8 | 0.0013 | 2026-10-29 | Missing authentication for critical function vulnerability in ABB Ability Edgenius. This | |
CVE-2026-54532 |
medium | 6.9 | 0.0019 | 2026-10-29 | CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d4 | |
CVE-2026-77156 |
medium | 6.3 | 0.0035 | 2026-10-29 | Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic o | |
CVE-2026-77157 |
medium | 6.3 | 0.0014 | 2026-10-29 | ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolv | |
CVE-2025-69723 |
medium | 6.1 | 0.0023 | 2026-10-29 | A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers | |
CVE-2026-113876 |
medium | 5.3 | 0.0029 | 2026-10-29 | SmileCDR HAPI FHIR does not correctly check authorization for conditional create actions. | |
CVE-2026-114643 |
medium | 5.3 | 0.0037 | 2026-10-29 | The MongoDB C# Driver writes GeoJSON extra members without checking whether their names co | |
CVE-2026-114645 |
medium | 5.7 | 0.0017 | 2026-10-29 | A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentic | |
CVE-2026-114646 |
medium | 6.9 | 0.0026 | 2026-10-29 | A data-validation flaw exists in the BSON handling and binary serialization path of the Mo | |
CVE-2026-114647 |
medium | 5.3 | 0.0026 | 2026-10-29 | The MongoDB C# Driver does not reject replacement documents whose top-level field names be | |
CVE-2026-114650 |
medium | 6.9 | 0.0011 | 2026-10-29 | A flaw in the client-side encryption support of the MongoDB .NET/C# driver can cause data | |
CVE-2026-114651 |
medium | 6.3 | 0.0039 | 2026-10-29 | A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver | |
CVE-2026-114654 |
medium | 6.9 | 0.0035 | 2026-10-29 | A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver allow | |
CVE-2026-114655 |
medium | 6.0 | 0.0027 | 2026-10-29 | libmongocrypt builds requests to external key management services (AWS, Azure and GCP) by | |
CVE-2026-115350 |
medium | 5.3 | 0.0019 | 2026-10-29 | Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directiv | |
CVE-2026-115351 |
medium | 5.3 | 0.0022 | 2026-10-29 | Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attacke | |
CVE-2026-115356 |
medium | 5.3 | 0.0021 | 2026-10-29 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not verify, when renewing a token issued | |
CVE-2026-115359 |
medium | 6.3 | 0.0019 | 2026-10-29 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsys | |
CVE-2026-115360 |
medium | 5.3 | 0.0025 | 2026-10-29 | OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity pro | |
CVE-2026-115370 |
medium | 5.3 | 0.0037 | 2026-10-29 | Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restricti | |
CVE-2026-115378 |
medium | 6.9 | 0.0029 | 2026-10-29 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file | |
CVE-2026-115379 |
medium | 6.9 | 0.0028 | 2026-10-29 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulne | |
CVE-2026-115380 |
medium | 5.1 | 0.0012 | 2026-10-29 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains a denial | |
CVE-2026-115381 |
medium | 5.9 | 0.0021 | 2026-10-29 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an unboun | |
CVE-2026-115382 |
medium | 5.9 | 0.0028 | 2026-10-29 | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulner | |
CVE-2026-115383 |
medium | 5.9 | 0.0018 | 2026-10-29 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vul | |
CVE-2026-115385 |
medium | 6.9 | 0.0011 | 2026-10-29 | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulner | |
CVE-2026-115387 |
medium | 6.9 | 0.0011 | 2026-10-29 | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial | |
CVE-2026-115388 |
medium | 6.9 | 0.0011 | 2026-10-29 | wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49. | |
CVE-2026-115390 |
medium | 6.9 | 0.0024 | 2026-10-29 | Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in | |
CVE-2026-115391 |
medium | 6.9 | 0.0017 | 2026-10-29 | Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource a | |
CVE-2026-115394 |
medium | 6.8 | 0.0016 | 2026-10-29 | Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryFiel | |
CVE-2026-115395 |
medium | 6.8 | 0.0013 | 2026-10-29 | Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in The | |
CVE-2026-115396 |
medium | 6.8 | 0.0013 | 2026-10-29 | Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerabil | |
CVE-2026-115397 |
medium | 6.8 | 0.0013 | 2026-10-29 | Ghidra before 12.2 contains a resource allocation without limits vulnerability in Extensio | |
CVE-2026-115517 |
medium | 6.4 | 0.0043 | 2026-10-29 | Unrestricted network access between execution contexts in KNIME Business Hub before versio | |
CVE-2026-95714 |
medium | 6.8 | 0.0032 | 2026-10-29 | A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authentica | |
CVE-2026-95715 |
medium | 6.8 | 0.0159 | 2026-10-29 | An unauthenticated command injection vulnerability exists in the command line interface of | |
CVE-2026-95716 |
medium | 6.5 | 0.0024 | 2026-10-29 | An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent | |
CVE-2026-95717 |
medium | 5.5 | 0.0027 | 2026-10-29 | A stored cross-site scripting (XSS) vulnerability exists in the web-based management inter | |
CVE-2026-95718 |
medium | 5.3 | 0.0038 | 2026-10-29 | An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauth | |
CVE-2026-95719 |
medium | 4.9 | 0.0034 | 2026-10-29 | An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 th | |
CVE-2026-95720 |
medium | 4.4 | 0.0015 | 2026-10-29 | A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker |