Browse All CVEs
35,848 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-61461 |
high | 8.7 | 0.0050 | 2026-10-29 | Dify before 1.16.0-rc1 contains a SQL injection vulnerability in the MyScale vector store | |
CVE-2026-6212 |
high | 8.8 | 0.0044 | 2026-10-29 | Authorization bypass through User-Controlled key vulnerability in Teracity Software Techno | |
CVE-2026-11321 |
high | 7.1 | 0.0042 | 2026-10-29 | The DataInjection plugin for GLPI 2.15.6 (GLPI 11 builds) concatenates user-supplied CSV f | |
CVE-2026-54714 |
medium | 6.1 | 0.0034 | 2026-10-29 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0 | |
CVE-2026-55370 |
medium | 6.4 | 0.0034 | 2026-10-29 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0 | |
CVE-2026-55377 |
high | 8.1 | 0.0040 | 2026-10-29 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0 | |
CVE-2026-55452 |
medium | 4.8 | 0.0043 | 2026-10-29 | Snipe-IT is an IT asset/license management system. Prior to 8.5.0, Actionlog::logaction() | |
CVE-2026-55461 |
medium | 6.1 | 0.0031 | 2026-10-29 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the user edit flow stor | |
CVE-2026-55462 |
medium | 4.3 | 0.0034 | 2026-10-29 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, UsersController::show() | |
CVE-2026-55466 |
medium | 6.2 | 0.0044 | 2026-10-29 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, UploadFileRequest sanit | |
CVE-2026-55469 |
medium | 6.5 | 0.0059 | 2026-10-29 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, an authenticated user w | |
CVE-2026-55475 |
medium | 5.7 | 0.0034 | 2026-10-29 | Snipe-IT is an IT asset/license management system. Prior to 8.6.1, the Importer API endpoi | |
CVE-2026-55479 |
medium | 5.3 | 0.0032 | 2026-10-29 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the legacy single-seat | |
CVE-2026-55481 |
medium | 6.2 | 0.0032 | 2026-10-29 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, default.blade.php rende | |
CVE-2026-55515 |
medium | 5.0 | 0.0034 | 2026-10-29 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the unaccepted-assets r | |
CVE-2026-55789 |
high | 8.5 | 0.0034 | 2026-10-29 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0 | |
CVE-2026-34196 |
high | 7.8 | 0.0017 | 2026-10-29 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-41154 |
high | 7.8 | 0.0018 | 2026-10-29 | Software installed and run as a non-privileged user may cause OOB kernel memory reads or w | |
CVE-2026-45196 |
high | 7.8 | 0.0014 | 2026-10-29 | Kernel software installed and running inside a Host VM may post improper commands to the G | |
CVE-2026-45203 |
high | 7.8 | 0.0013 | 2026-10-29 | Kernel software installed and running inside a Host VM may post improper commands to the G | |
CVE-2026-55659 |
high | 7.7 | 0.0036 | 2026-10-29 | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, sever | |
CVE-2026-55664 |
medium | 4.3 | 0.0033 | 2026-10-29 | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, the G | |
CVE-2026-55665 |
high | 8.5 | 0.0053 | 2026-10-29 | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, Grist | |
CVE-2026-57211 |
critical | 10.0 | 0.0063 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the Ra | |
CVE-2026-57212 |
high | 7.1 | 0.0043 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, | |
CVE-2026-57213 |
medium | 5.7 | 0.0025 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, | |
CVE-2026-57214 |
high | 7.1 | 0.0022 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 4.2.5, the RabbitMQ management UI r | |
CVE-2026-57215 |
high | 7.0 | 0.0038 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, | |
CVE-2026-57216 |
critical | 10.0 | 0.0050 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, | |
CVE-2026-57217 |
high | 7.0 | 0.0035 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.21, 4.1.11, and 4.2.6, | |
CVE-2026-57218 |
medium | 4.9 | 0.0035 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows a | |
CVE-2026-57219 |
high | 8.7 | 0.0284 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, | |
CVE-2026-57220 |
high | 7.5 | 0.0055 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, the RabbitMQ stream listener | |
CVE-2026-57221 |
medium | 5.3 | 0.0041 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, | |
CVE-2026-57574 |
high | 7.4 | 0.0055 | 2026-10-29 | Misskey is an open source, federated social media platform. Prior to 2026.6.0, Misskey con | |
CVE-2026-57575 |
medium | 6.9 | 0.0060 | 2026-10-29 | Misskey is an open source, federated social media platform. Prior to 2026.6.0, Misskey con | |
CVE-2026-57807 |
critical | 9.8 | 0.0073 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Secur | |
CVE-2026-58499 |
high | 8.2 | 0.0054 | 2026-10-29 | EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traver | |
CVE-2026-7639 |
high | 7.8 | 0.0018 | 2026-10-29 | Software installed and run as a non-privileged user may conduct a sequence of improper GPU | |
CVE-2026-9726 |
critical | 9.8 | 0.0056 | 2026-10-29 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili | |
CVE-2026-10768 |
critical | 9.8 | 0.0213 | 2026-10-29 | Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. | |
CVE-2026-10769 |
medium | 5.4 | 0.0023 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-10770 |
medium | 6.1 | 0.0026 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-11908 |
medium | 5.4 | 0.0023 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-11909 |
low | 3.3 | 0.0021 | 2026-10-29 | Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Brow | |
CVE-2026-12535 |
critical | 9.8 | 0.0056 | 2026-10-29 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili | |
CVE-2026-13231 |
medium | 6.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-13232 |
low | 3.1 | 0.0021 | 2026-10-29 | Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedb | |
CVE-2026-13233 |
low | 3.3 | 0.0021 | 2026-10-29 | Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server S | |
CVE-2026-13234 |
medium | 6.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne |