Browse All CVEs
35,398 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-62294 |
medium | 5.1 | 0.0014 | 2026-10-29 | Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open Wit | |
CVE-2026-41580 |
medium | 6.1 | 0.0027 | 2026-10-29 | Stirling-PDF is a locally hosted web application that facilitates various operations on PD | |
CVE-2026-45150 |
medium | 6.3 | 0.0031 | 2026-10-29 | Zen is a firefox-based browser. Prior to 1.19.13b, Zen Browser did not provide a persisten | |
CVE-2026-46709 |
high | 7.8 | 0.0025 | 2026-10-29 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.234, Ta | |
CVE-2026-47158 |
high | 8.3 | 0.0025 | 2026-10-29 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden | |
CVE-2026-47159 |
medium | 6.9 | 0.0047 | 2026-10-29 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden | |
CVE-2026-47160 |
medium | 5.8 | 0.0029 | 2026-10-29 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden | |
CVE-2026-47164 |
high | 7.7 | 0.0045 | 2026-10-29 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden | |
CVE-2026-55242 |
high | 8.8 | 0.0020 | 2026-10-29 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and | |
CVE-2026-61828 |
high | 8.5 | 0.0015 | 2026-10-29 | Nixpkgs is a collection of software packages that can be installed with the Nix package ma | |
CVE-2026-9007 |
medium | 5.5 | 0.0044 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-1562 |
medium | 4.6 | 0.0024 | 2026-10-29 | Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting | |
CVE-2026-1563 |
medium | 4.8 | 0.0024 | 2026-10-29 | Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site script | |
CVE-2026-20150 |
high | 8.8 | 0.0042 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-20153 |
high | 7.5 | 0.0047 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-20156 |
critical | 9.8 | 0.0046 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-20157 |
critical | 9.8 | 0.0019 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-20158 |
high | 7.5 | 0.0047 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-20187 |
high | 7.5 | 0.0047 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-45804 |
high | 7.5 | 0.0037 | 2026-10-29 | Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, Diffusers' Di | |
CVE-2026-47703 |
medium | 6.3 | 0.0014 | 2026-10-29 | AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, | |
CVE-2026-48799 |
high | 7.7 | 0.0022 | 2026-10-29 | Postiz is an AI social media scheduling tool. Prior to 2.21.8, Postiz fails to verify Nowp | |
CVE-2026-52842 |
critical | 9.3 | 0.0025 | 2026-10-29 | Lightpanda is a headless browser designed for AI and automation. Prior to 0.3.1, Lightpand | |
CVE-2026-52843 |
critical | 9.3 | 0.0023 | 2026-10-29 | Lightpanda is a headless browser designed for AI and automation. Prior to 0.2.9, Lightpand | |
CVE-2026-59954 |
high | 7.5 | 0.0057 | 2026-10-29 | Apollo is a reliable configuration management system suitable for microservice configurati | |
CVE-2026-59955 |
high | 7.5 | 0.0057 | 2026-10-29 | Apollo is a reliable configuration management system suitable for microservice configurati | |
CVE-2026-62378 |
critical | 9.0 | 0.0042 | 2026-10-29 | RustFS Console is a web management console for the RustFS distributed file system. From 0. | |
CVE-2026-10673 |
high | 8.8 | 0.0042 | 2026-10-29 | The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111 | |
CVE-2026-14960 |
critical | 9.8 | 0.0046 | 2026-10-29 | Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionality through | |
CVE-2026-14961 |
medium | 6.2 | 0.0016 | 2026-10-29 | Pegatron `Tdelo64.sys` exposes a privileged device interface, `\\.\TdeIo`, that fails to p | |
CVE-2026-40501 |
high | 8.6 | 0.0080 | 2026-10-29 | Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote cod | |
CVE-2026-50562 |
critical | 9.3 | 0.0021 | 2026-10-29 | FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040a | |
CVE-2026-56087 |
medium | 6.1 | 0.0021 | 2026-10-29 | Dell ThinOS 10, versions prior to 2605_10.2100 contain a Protection Mechanism Failure vuln | |
CVE-2026-56687 |
high | 7.8 | 0.0015 | 2026-10-29 | Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerab | |
CVE-2026-58659 |
high | 8.4 | 0.0063 | 2026-10-29 | PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution | |
CVE-2026-59255 |
high | 7.1 | 0.0044 | 2026-10-29 | BloodHound through 9.4.0, fixed in commit 8f79035, contains a missing authorization vulner | |
CVE-2026-59258 |
high | 7.2 | 0.0046 | 2026-10-29 | immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/ | |
CVE-2026-61643 |
medium | 5.9 | 0.0019 | 2026-10-29 | FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, an | |
CVE-2026-15746 |
medium | 6.9 | 0.0042 | 2026-10-29 | Strands Agents is an open-source Python SDK for building and running AI agents. The strand | |
CVE-2026-15895 |
high | 8.4 | 0.0108 | 2026-10-29 | OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 | |
CVE-2026-26032 |
medium | 5.4 | 0.0051 | 2026-10-29 | The PackagerResolver of Apache Ivy is able to download online artifacts and to (re)package | |
CVE-2026-46485 |
high | 8.2 | 0.0038 | 2026-10-29 | Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC | |
CVE-2026-49987 |
high | 7.5 | 0.0070 | 2026-10-29 | Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, src/cor | |
CVE-2026-49988 |
medium | 6.8 | 0.0018 | 2026-10-29 | Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, the Rep | |
CVE-2026-54443 |
medium | 5.9 | 0.0029 | 2026-10-29 | Dashy is a self-hostable personal dashboard. From 1.9.4 until 3.2.0, the Dashy RSS Widget | |
CVE-2026-62348 |
medium | 5.4 | 0.0025 | 2026-10-29 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4. | |
CVE-2026-62349 |
high | 8.3 | 0.0050 | 2026-10-29 | TDengine is an open source, time-series database optimized for Internet of Things devices. | |
CVE-2026-62350 |
high | 7.2 | 0.0046 | 2026-10-29 | TDengine is an open source, time-series database optimized for Internet of Things devices. | |
CVE-2026-62351 |
high | 7.5 | 0.0039 | 2026-10-29 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4. | |
CVE-2026-62353 |
medium | 5.4 | 0.0037 | 2026-10-29 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4. |