Browse All CVEs
35,706 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-62240 |
high | 8.3 | 0.0052 | 2026-10-29 | CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_ | |
CVE-2026-62242 |
high | 7.7 | 0.0037 | 2026-10-29 | Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability | |
CVE-2026-62327 |
critical | 9.3 | 0.0627 | 2026-10-29 | 9Router through version 0.4.41 contains an unauthenticated information disclosure vulnerab | |
CVE-2026-62328 |
high | 8.7 | 0.0046 | 2026-10-29 | 9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerabi | |
CVE-2026-15607 |
low | 2.1 | 0.0044 | 2026-10-29 | A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is | |
CVE-2026-57855 |
high | 8.7 | 0.0052 | 2026-10-29 | Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API | |
CVE-2026-57856 |
high | 8.7 | 0.0048 | 2026-10-29 | Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/syste | |
CVE-2026-58101 |
high | 7.5 | 0.0031 | 2026-10-29 | Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL point | |
CVE-2026-58102 |
critical | 9.1 | 0.0034 | 2026-10-29 | Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a | |
CVE-2026-15618 |
low | 2.1 | 0.0042 | 2026-10-29 | A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element | |
CVE-2026-15619 |
low | 2.1 | 0.0043 | 2026-10-29 | A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is th | |
CVE-2026-0487 |
high | 8.4 | 0.0021 | 2026-10-29 | SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) fi | |
CVE-2026-15620 |
low | 2.1 | 0.0040 | 2026-10-29 | A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects t | |
CVE-2026-15621 |
medium | 4.8 | 0.0020 | 2026-10-29 | A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function re | |
CVE-2026-27690 |
critical | 9.1 | 0.0068 | 2026-10-29 | Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attack | |
CVE-2026-44745 |
high | 8.1 | 0.0047 | 2026-10-29 | SAP Approuter does not properly validate incoming request headers during the OAuth2 login | |
CVE-2026-44747 |
critical | 9.9 | 0.0056 | 2026-10-29 | SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical | |
CVE-2026-44752 |
high | 8.2 | 0.0036 | 2026-10-29 | SAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicio | |
CVE-2026-44753 |
low | 3.7 | 0.0035 | 2026-10-29 | SAP HANA Database (user self service tools) allows an unauthenticated user to send special | |
CVE-2026-44759 |
medium | 6.1 | 0.0029 | 2026-10-29 | SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scr | |
CVE-2026-44760 |
medium | 4.7 | 0.0023 | 2026-10-29 | Due to a Cross-Site Scripting (XSS) vulnerability, applications based on Business Server P | |
CVE-2026-44761 |
critical | 9.1 | 0.0050 | 2026-10-29 | SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample cre | |
CVE-2026-44767 |
medium | 6.1 | 0.0029 | 2026-10-29 | setThemeRoot() failed to enforce the sap-allowed-theme-origins allowlist. An attacker-cont | |
CVE-2026-44768 |
medium | 4.1 | 0.0026 | 2026-10-29 | SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the con | |
CVE-2026-44769 |
medium | 5.5 | 0.0031 | 2026-10-29 | SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileg | |
CVE-2026-44770 |
medium | 4.3 | 0.0028 | 2026-10-29 | SAP Create Single Payment does not perform necessary authorization checks for an authentic | |
CVE-2026-44771 |
medium | 4.3 | 0.0028 | 2026-10-29 | SAP S/4HANA Draft operation does not perform necessary authorization checks for an authent | |
CVE-2026-58233 |
high | 7.6 | 0.0056 | 2026-10-29 | SAP Change and Transport System Attach Tool (ctsattach) allows an authenticated attacker t | |
CVE-2026-15622 |
medium | 5.5 | 0.0059 | 2026-10-29 | A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function get_works | |
CVE-2026-15624 |
low | 2.1 | 0.0037 | 2026-10-29 | A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3. Affected by this | |
CVE-2026-15625 |
low | 2.1 | 0.0048 | 2026-10-29 | A vulnerability was found in nextlevelbuilder GoClaw 3.11.3. Affected by this issue is the | |
CVE-2026-15626 |
low | 2.1 | 0.0043 | 2026-10-29 | A vulnerability was determined in nextlevelbuilder GoClaw 3.13.3-beta.3. This affects the | |
CVE-2026-15627 |
low | 2.1 | 0.0042 | 2026-10-29 | A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This vulner | |
CVE-2026-15628 |
low | 2.1 | 0.0037 | 2026-10-29 | A security flaw has been discovered in zhayujie chatgpt-on-wechat CowAgent up to 2.1.1. Th | |
CVE-2026-15629 |
low | 2.1 | 0.0043 | 2026-10-29 | A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function C | |
CVE-2026-15668 |
low | 2.1 | 0.0040 | 2026-10-29 | A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects | |
CVE-2026-12482 |
medium | 6.5 | 0.0033 | 2026-10-29 | A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious | |
CVE-2026-15669 |
low | 1.9 | 0.0108 | 2026-10-29 | A vulnerability was found in louisho5 picobot up to 0.2.0. This issue affects the function | |
CVE-2026-15672 |
low | 2.1 | 0.0033 | 2026-10-29 | A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is | |
CVE-2026-15675 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was identified in code-projects Online Job Portal 1.0. The affected elemen | |
CVE-2026-15676 |
medium | 5.5 | 0.0043 | 2026-10-29 | A security flaw has been discovered in code-projects Online Job Portal up to 1.0. The impa | |
CVE-2026-15677 |
medium | 5.5 | 0.0050 | 2026-10-29 | A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unk | |
CVE-2026-15678 |
low | 2.0 | 0.0035 | 2026-10-29 | A security vulnerability has been detected in code-projects Online Job Portal 1.0. This im | |
CVE-2026-59674 |
high | 7.1 | 0.0017 | 2026-10-29 | A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata pac | |
CVE-2026-10051 |
medium | 6.9 | 0.0043 | 2026-10-29 | In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the t | |
CVE-2026-12606 |
medium | 6.3 | 0.0030 | 2026-10-29 | Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in mal | |
CVE-2026-13699 |
medium | 6.5 | 0.0039 | 2026-10-29 | In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler | |
CVE-2026-15075 |
high | 8.2 | 0.0020 | 2026-10-29 | In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), | |
CVE-2026-15076 |
high | 8.2 | 0.0020 | 2026-10-29 | In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientS | |
CVE-2026-15183 |
critical | 9.2 | 0.0031 | 2026-10-29 | Multiple input validation vulnerabilities in the Snowflake Spark Connector (spark-snowflak |