Browse All CVEs
35,885 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-54004 |
medium | 6.3 | 0.0050 | 2026-10-29 | Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites w | |
CVE-2026-54005 |
high | 7.1 | 0.0043 | 2026-10-29 | Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites w | |
CVE-2026-54695 |
medium | 6.5 | 0.0056 | 2026-10-29 | Pipecat is an open-source Python framework for building real-time voice and multimodal con | |
CVE-2026-55590 |
medium | 5.1 | 0.0049 | 2026-10-29 | CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PS | |
CVE-2026-58198 |
medium | 5.5 | 0.0014 | 2026-10-29 | ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Pri | |
CVE-2026-0275 |
low | 2.0 | 0.0016 | 2026-10-29 | A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a | |
CVE-2026-0276 |
low | 1.1 | 0.0014 | 2026-10-29 | A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a | |
CVE-2026-0277 |
medium | 5.7 | 0.0020 | 2026-10-29 | An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enabl | |
CVE-2026-0278 |
medium | 5.8 | 0.0015 | 2026-10-29 | Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DL | |
CVE-2026-15270 |
medium | 6.8 | 0.0085 | 2026-10-29 | A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vuln | |
CVE-2026-31267 |
medium | 5.7 | 0.0032 | 2026-10-29 | Mercusys MW302R MW302R(EU)_V1_1.4.10 Build 231023 is vulnerable to Buffer Overflow in the | |
CVE-2026-33794 |
high | 8.2 | 0.0040 | 2026-10-29 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced fo | |
CVE-2026-33800 |
high | 7.1 | 0.0027 | 2026-10-29 | An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) | |
CVE-2026-51924 |
high | 8.1 | 0.0057 | 2026-10-29 | An issue in docuForm GmbH Client v.11.11c allows a remote attacker to execute arbitrary co | |
CVE-2026-51926 |
high | 7.5 | 0.0062 | 2026-10-29 | An issue in docuForm GmbH FSM Client v.11.11c allows a remote attacker to obtain sensitive | |
CVE-2026-55865 |
high | 7.1 | 0.0045 | 2026-10-29 | Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.1, given a | |
CVE-2026-60120 |
medium | 5.1 | 0.0036 | 2026-10-29 | Bagisto before 2.4.4 contains a stored cross-site scripting vulnerability via client-side | |
CVE-2026-15274 |
low | 1.9 | 0.0016 | 2026-10-29 | A vulnerability was detected in lo48576 fbxcel up to 0.9.0. This affects an unknown part o | |
CVE-2026-15276 |
low | 1.9 | 0.0016 | 2026-10-29 | A flaw has been found in pdeljanov Symphonia up to 0.6.0. This vulnerability affects unkno | |
CVE-2026-33802 |
medium | 6.8 | 0.0012 | 2026-10-29 | A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series | |
CVE-2026-33803 |
medium | 6.9 | 0.0035 | 2026-10-29 | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Ju | |
CVE-2026-55604 |
high | 8.6 | 0.0037 | 2026-10-29 | DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior | |
CVE-2026-55605 |
medium | 5.3 | 0.0052 | 2026-10-29 | DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior | |
CVE-2026-57019 |
high | 7.1 | 0.0027 | 2026-10-29 | An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwardi | |
CVE-2026-57020 |
high | 7.1 | 0.0027 | 2026-10-29 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwar | |
CVE-2026-57021 |
medium | 6.9 | 0.0047 | 2026-10-29 | An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks | |
CVE-2026-57022 |
high | 8.2 | 0.0040 | 2026-10-29 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwar | |
CVE-2026-57023 |
high | 8.7 | 0.0046 | 2026-10-29 | An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugi | |
CVE-2026-57024 |
medium | 6.9 | 0.0042 | 2026-10-29 | A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (ike | |
CVE-2026-57026 |
high | 8.7 | 0.0046 | 2026-10-29 | An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin o | |
CVE-2026-57027 |
high | 7.1 | 0.0027 | 2026-10-29 | A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwardin | |
CVE-2026-57028 |
medium | 6.9 | 0.0030 | 2026-10-29 | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Ju | |
CVE-2026-57029 |
medium | 6.0 | 0.0019 | 2026-10-29 | A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks | |
CVE-2026-57030 |
high | 8.2 | 0.0038 | 2026-10-29 | A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Conditio | |
CVE-2026-57031 |
medium | 5.3 | 0.0022 | 2026-10-29 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwar | |
CVE-2026-57032 |
high | 7.1 | 0.0042 | 2026-10-29 | An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine | |
CVE-2026-57054 |
medium | 6.9 | 0.0037 | 2026-10-29 | A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin | |
CVE-2026-58122 |
critical | 9.3 | 0.0037 | 2026-10-29 | Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows u | |
CVE-2026-58123 |
critical | 9.3 | 0.0465 | 2026-10-29 | Hermes WebUI before 0.51.788 contains an unauthenticated remote code execution vulnerabili | |
CVE-2026-33655 |
high | 7.7 | 0.0044 | 2026-10-29 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset mana | |
CVE-2026-44342 |
medium | 5.3 | 0.0019 | 2026-10-29 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset mana | |
CVE-2026-57501 |
none | — | 0.0051 | 2026-10-29 | Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glance and split-view context-menu | |
CVE-2026-59832 |
high | 7.7 | 0.0046 | 2026-10-29 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /snippe | |
CVE-2026-59833 |
high | 8.6 | 0.0049 | 2026-10-29 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, SiYuan rend | |
CVE-2026-59834 |
high | 7.5 | 0.0048 | 2026-10-29 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the block s | |
CVE-2026-59853 |
medium | 6.5 | 0.0030 | 2026-10-29 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /api/st | |
CVE-2026-59854 |
medium | 4.9 | 0.0049 | 2026-10-29 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, POST /api/f | |
CVE-2026-59855 |
high | 8.6 | 0.0039 | 2026-10-29 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, Asset.rende | |
CVE-2026-15311 |
low | 2.0 | 0.0036 | 2026-10-29 | A vulnerability was identified in NousResearch hermes-agent up to 2026.5.29.2. Affected by | |
CVE-2026-15317 |
low | 2.1 | 0.0043 | 2026-10-29 | A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. Affected by this vulne |