Browse All CVEs
39,464 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-12519 |
medium | 5.0 | 0.0024 | 2026-10-29 | The WNC-M14A2A LTE-M modem driver mishandles unsolicited %NOTIFYEV: events in on_cmd_sockn | |
CVE-2026-12629 |
medium | 4.6 | 0.0023 | 2026-10-29 | The ARM PL011 UART driver in drivers/serial/uart_pl011.c fails to acknowledge receive erro | |
CVE-2026-12630 |
medium | 4.3 | 0.0026 | 2026-10-29 | Zephyr's 6LoWPAN IP Header Compression (IPHC) uncompression code contains an out-of-bounds | |
CVE-2026-40145 |
high | 7.1 | 0.0015 | 2026-10-29 | A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows | |
CVE-2026-61666 |
high | 8.9 | 0.0044 | 2026-10-29 | websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSo | |
CVE-2026-68517 |
medium | 6.5 | 0.0046 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, the cors_ | |
CVE-2026-68518 |
high | 8.8 | 0.0017 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, _sanitize | |
CVE-2026-9771 |
high | 8.8 | 0.0014 | 2026-10-29 | The flash_copy() system call is verified by z_vrfy_flash_copy() in drivers/flash/flash_uti | |
CVE-2026-33437 |
high | 8.1 | 0.0040 | 2026-10-29 | Stirling-PDF is a locally hosted web application that facilitates various operations on PD | |
CVE-2026-46345 |
high | 8.4 | 0.0020 | 2026-10-29 | compliance-trestle is a tooling platform for managing compliance as code. Prior to version | |
CVE-2026-48053 |
medium | 5.8 | 0.0038 | 2026-10-29 | Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri A | |
CVE-2026-50770 |
critical | 9.8 | 0.0061 | 2026-10-29 | An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate | |
CVE-2026-50771 |
medium | 6.1 | 0.0031 | 2026-10-29 | Cross Site Scripting vulnerability in Squirro Cognitive Search < 3.14.2 allows a remote at | |
CVE-2026-50772 |
critical | 9.8 | 0.0068 | 2026-10-29 | An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrar | |
CVE-2026-51346 |
critical | 9.1 | 0.0070 | 2026-10-29 | SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a | |
CVE-2026-54284 |
high | 8.7 | 0.0033 | 2026-10-29 | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList const | |
CVE-2026-59893 |
high | 7.5 | 0.0034 | 2026-10-29 | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_REGEX in sq | |
CVE-2026-59894 |
medium | 6.2 | 0.0013 | 2026-10-29 | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse/filter | |
CVE-2026-62982 |
high | 8.8 | 0.0020 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. From 4.5.2 until 4.5.6, _ | |
CVE-2026-68519 |
high | 7.1 | 0.0018 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, GlancesAc | |
CVE-2026-68520 |
medium | 5.3 | 0.0040 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, as_dict_s | |
CVE-2026-71491 |
high | 8.7 | 0.0026 | 2026-10-29 | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group_comments | |
CVE-2026-71979 |
high | 8.7 | 0.0058 | 2026-10-29 | INDI (Instrument Neutral Distributed Interface) indiserver through 2.2.4.2, fixed in commi | |
CVE-2026-71980 |
high | 8.7 | 0.0061 | 2026-10-29 | Belledonne Communications bcg729 through 1.1.2 contains an out-of-bounds read vulnerabilit | |
CVE-2026-73424 |
medium | 6.5 | 0.0038 | 2026-10-29 | Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro | |
CVE-2026-73522 |
high | 8.7 | 0.0395 | 2026-10-29 | COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows u | |
CVE-2026-73523 |
high | 8.7 | 0.0055 | 2026-10-29 | COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-list | |
CVE-2026-74253 |
critical | 10.0 | 0.0032 | 2026-10-29 | Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user | |
CVE-2026-74254 |
critical | 9.3 | 0.0039 | 2026-10-29 | Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla ext | |
CVE-2026-12553 |
high | 8.9 | 0.0043 | 2026-10-29 | HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an una | |
CVE-2026-50773 |
high | 7.8 | 0.0027 | 2026-10-29 | An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote atta | |
CVE-2026-50774 |
critical | 9.8 | 0.0061 | 2026-10-29 | An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the | |
CVE-2026-50776 |
high | 7.5 | 0.0180 | 2026-10-29 | Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a r | |
CVE-2026-74238 |
high | 8.7 | 0.0048 | 2026-10-29 | TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Deco | |
CVE-2026-75011 |
low | 2.1 | 0.0182 | 2026-10-29 | A flaw has been found in kylecui NetForensicMCP 2.1.0. Impacted is the function execAsync | |
CVE-2026-57485 |
high | 8.5 | 0.0042 | 2026-10-29 | Stirling-PDF is a locally hosted web application that facilitates various operations on PD | |
CVE-2026-63667 |
medium | 6.5 | 0.0046 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the imp | |
CVE-2026-63669 |
medium | 6.5 | 0.0031 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.32.0, the pa | |
CVE-2026-63670 |
medium | 6.1 | 0.0033 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Prior to 2.17.6, saniti | |
CVE-2026-67678 |
critical | 9.8 | 0.0077 | 2026-10-29 | File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to | |
CVE-2026-68005 |
high | 7.5 | 0.0058 | 2026-10-29 | An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of s | |
CVE-2026-71486 |
medium | 4.3 | 0.0037 | 2026-10-29 | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the /v | |
CVE-2026-71553 |
high | 7.1 | 0.0043 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. In 4.32.0 and earlier, | |
CVE-2026-75012 |
medium | 5.7 | 0.0066 | 2026-10-29 | A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affe | |
CVE-2026-75013 |
medium | 5.7 | 0.0066 | 2026-10-29 | A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the f | |
CVE-2026-75014 |
medium | 5.5 | 0.0043 | 2026-10-29 | A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnera | |
CVE-2026-19589 |
high | 7.1 | 0.0019 | 2026-10-29 | Packer up to 1.15.4 is vulnerable to an issue in the third-party plugin installer that may | |
CVE-2026-47683 |
high | 8.7 | 0.0054 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforc | |
CVE-2026-47686 |
critical | 9.9 | 0.0058 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException() in lib/se | |
CVE-2026-47698 |
critical | 9.8 | 0.0097 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup |