Browse All CVEs
39,684 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-46688 |
medium | 6.9 | 0.0042 | 2026-10-29 | The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting room | |
CVE-2026-48791 |
low | 2.0 | 0.0007 | 2026-10-29 | sigstore-java is a sigstore java client for interacting with sigstore infrastructure. Vers | |
CVE-2026-49473 |
high | 8.8 | 0.0047 | 2026-10-29 | @cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that int | |
CVE-2026-49819 |
critical | 9.8 | 0.0108 | 2026-10-29 | UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing- | |
CVE-2026-50544 |
medium | 6.3 | 0.0013 | 2026-10-29 | NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior t | |
CVE-2026-0289 |
low | 0.5 | 0.0031 | 2026-10-29 | A security bypass vulnerability in the Account Protection feature of Palo Alto Networks P | |
CVE-2026-0290 |
low | 0.5 | 0.0015 | 2026-10-29 | An information disclosure vulnerability in the Account Protection feature of Palo Alto Ne | |
CVE-2026-0291 |
low | 1.1 | 0.0015 | 2026-10-29 | An improper link resolution before file access vulnerability exists in the Palo Alto Netwo | |
CVE-2026-0292 |
low | 2.1 | 0.0019 | 2026-10-29 | An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® | |
CVE-2026-0293 |
medium | 5.6 | 0.0016 | 2026-10-29 | A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local atta | |
CVE-2026-0294 |
medium | 6.0 | 0.0017 | 2026-10-29 | A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent a | |
CVE-2026-0295 |
medium | 4.1 | 0.0011 | 2026-10-29 | A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locall | |
CVE-2026-0296 |
medium | 4.5 | 0.0026 | 2026-10-29 | Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app e | |
CVE-2026-0297 |
medium | 5.2 | 0.0060 | 2026-10-29 | A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that e | |
CVE-2026-0298 |
medium | 5.2 | 0.0066 | 2026-10-29 | An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider | |
CVE-2026-0299 |
medium | 5.9 | 0.0017 | 2026-10-29 | Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app en | |
CVE-2026-16458 |
medium | 5.9 | 0.0009 | 2026-10-29 | Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all vers | |
CVE-2026-16459 |
medium | 5.9 | 0.0009 | 2026-10-29 | Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library i | |
CVE-2026-19694 |
medium | 5.5 | 0.0013 | 2026-10-29 | TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service | |
CVE-2026-19695 |
medium | 5.5 | 0.0012 | 2026-10-29 | Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service | |
CVE-2026-19696 |
medium | 5.5 | 0.0012 | 2026-10-29 | Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows den | |
CVE-2026-11970 |
medium | 4.8 | 0.0016 | 2026-10-29 | This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint | |
CVE-2026-59499 |
high | 8.6 | 0.0042 | 2026-10-29 | : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Por | |
CVE-2026-59500 |
critical | 10.0 | 0.0050 | 2026-10-29 | : Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP | |
CVE-2026-59501 |
high | 8.2 | 0.0034 | 2026-10-29 | : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP | |
CVE-2026-59502 |
medium | 5.3 | 0.0033 | 2026-10-29 | : Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP | |
CVE-2026-59503 |
critical | 9.1 | 0.0043 | 2026-10-29 | : Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Persona | |
CVE-2026-59504 |
critical | 9.1 | 0.0043 | 2026-10-29 | : Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generat | |
CVE-2026-59505 |
high | 8.6 | 0.0039 | 2026-10-29 | : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP | |
CVE-2026-59506 |
critical | 9.3 | 0.0041 | 2026-10-29 | : Missing Authentication for Critical Function vulnerability in Priority Portal Generator | |
CVE-2026-59507 |
critical | 9.3 | 0.0034 | 2026-10-29 | : Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Act | |
CVE-2026-18368 |
medium | 6.0 | 0.0025 | 2026-10-29 | In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper | |
CVE-2026-45819 |
medium | 6.6 | 0.0051 | 2026-10-29 | baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on inv | |
CVE-2026-73483 |
critical | 9.4 | 0.0062 | 2026-10-29 | Flowise (packages flowise and flowise-components) in versions <= 3.1.2 contain a sandbox e | |
CVE-2026-73484 |
high | 8.6 | 0.0043 | 2026-10-29 | Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts tha | |
CVE-2026-73485 |
critical | 9.0 | 0.0060 | 2026-10-29 | Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node th | |
CVE-2026-73486 |
critical | 9.0 | 0.0066 | 2026-10-29 | Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's custo | |
CVE-2026-73487 |
critical | 9.0 | 0.0096 | 2026-10-29 | Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtab | |
CVE-2026-73488 |
medium | 6.0 | 0.0037 | 2026-10-29 | Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in | |
CVE-2026-73601 |
critical | 9.0 | 0.0110 | 2026-10-29 | Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom | |
CVE-2026-73602 |
critical | 9.0 | 0.0083 | 2026-10-29 | Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox | |
CVE-2026-73603 |
medium | 6.3 | 0.0033 | 2026-10-29 | Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to- | |
CVE-2026-73604 |
high | 7.1 | 0.0041 | 2026-10-29 | Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET | |
CVE-2026-73605 |
medium | 6.9 | 0.0032 | 2026-10-29 | SiYuan versions before v3.7.4 contain a path traversal vulnerability in the getUniqueFilen | |
CVE-2026-73606 |
medium | 6.9 | 0.0032 | 2026-10-29 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/ | |
CVE-2026-73607 |
medium | 6.9 | 0.0025 | 2026-10-29 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/ | |
CVE-2026-73608 |
critical | 9.2 | 0.0031 | 2026-10-29 | SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7. | |
CVE-2026-73609 |
medium | 6.9 | 0.0032 | 2026-10-29 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBo | |
CVE-2026-73610 |
medium | 6.9 | 0.0026 | 2026-10-29 | SiYuan before v3.7.4 contains an information disclosure vulnerability in the local storage | |
CVE-2026-73614 |
high | 8.7 | 0.0068 | 2026-10-29 | Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters be |