Browse All CVEs
34,833 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-64612 |
high | 7.5 | 0.0070 | 2026-10-29 | A flaw was found in libcupsfilters and cups-filters. The PNG image reading function create | |
CVE-2026-8169 |
high | 8.7 | 0.0038 | 2026-10-29 | ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privilege | |
CVE-2026-8170 |
high | 8.7 | 0.0056 | 2026-10-29 | The mv, cp, and rm file utilities exposed within the ExtremeXOS (EXOS) shell environment f | |
CVE-2026-12341 |
critical | 9.8 | 0.0040 | 2026-10-29 | This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attack | |
CVE-2026-48389 |
high | 7.8 | 0.0034 | 2026-10-29 | DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vuln | |
CVE-2026-60026 |
high | 8.9 | 0.0053 | 2026-10-29 | Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Page Builder | |
CVE-2026-60027 |
high | 8.7 | 0.0052 | 2026-10-29 | Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Pag | |
CVE-2026-60028 |
high | 8.6 | 0.0042 | 2026-10-29 | Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 | |
CVE-2026-60029 |
medium | 5.1 | 0.0042 | 2026-10-29 | Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 | |
CVE-2026-60030 |
high | 8.7 | 0.0041 | 2026-10-29 | Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Pag | |
CVE-2026-60031 |
medium | 6.9 | 0.0043 | 2026-10-29 | Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1 - | |
CVE-2026-60032 |
critical | 9.4 | 0.0041 | 2026-10-29 | Joomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia < 1.6.0 | |
CVE-2026-60033 |
medium | 5.1 | 0.0039 | 2026-10-29 | Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0 - | |
CVE-2026-60034 |
critical | 9.4 | 0.0042 | 2026-10-29 | Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0 - | |
CVE-2026-61424 |
critical | 10.0 | 0.0044 | 2026-10-29 | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classif | |
CVE-2026-61425 |
critical | 9.4 | 0.0057 | 2026-10-29 | Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla ext | |
CVE-2026-61900 |
critical | 10.0 | 0.0044 | 2026-10-29 | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownlo | |
CVE-2026-61901 |
medium | 6.1 | 0.0024 | 2026-10-29 | Joomla Extension - hikashop.com - Open redirect in Hikashop < 6.5.2 - The Joomla extension | |
CVE-2026-62414 |
critical | 9.1 | 0.0040 | 2026-10-29 | Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The | |
CVE-2026-63108 |
high | 7.7 | 0.0177 | 2026-10-29 | Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve exe | |
CVE-2026-63730 |
medium | 5.3 | 0.0040 | 2026-10-29 | HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows aut | |
CVE-2026-63731 |
medium | 6.3 | 0.0030 | 2026-10-29 | HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows aut | |
CVE-2026-63768 |
medium | 5.3 | 0.0034 | 2026-10-29 | cal.diy through 6.2.0 contains an open redirect vulnerability in the conferencing OAuth ca | |
CVE-2026-63770 |
high | 8.2 | 0.0029 | 2026-10-29 | Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication h | |
CVE-2026-63771 |
medium | 6.0 | 0.0043 | 2026-10-29 | Adminer before 5.4.3 contains a cookie injection vulnerability that allows attackers to ma | |
CVE-2026-64193 |
critical | 9.8 | 0.0144 | 2026-10-29 | Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED | |
CVE-2026-64194 |
high | 7.5 | 0.0068 | 2026-10-29 | Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression p | |
CVE-2026-64619 |
high | 8.7 | 0.0029 | 2026-10-29 | FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class | |
CVE-2026-15788 |
medium | 5.6 | 0.0041 | 2026-10-29 | BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers doe | |
CVE-2026-44229 |
medium | 5.4 | 0.0014 | 2026-10-29 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 an | |
CVE-2026-44230 |
medium | 6.1 | 0.0015 | 2026-10-29 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up | |
CVE-2026-44231 |
critical | 9.1 | 0.0025 | 2026-10-29 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to | |
CVE-2026-53591 |
high | 8.6 | 0.0027 | 2026-10-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior t | |
CVE-2026-53592 |
medium | 4.6 | 0.0014 | 2026-10-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A Proto | |
CVE-2026-53593 |
high | 8.8 | 0.0035 | 2026-10-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior t | |
CVE-2026-63766 |
critical | 9.3 | 0.0215 | 2026-10-29 | GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.p | |
CVE-2026-63767 |
critical | 9.3 | 0.0112 | 2026-10-29 | ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle d | |
CVE-2024-51311 |
critical | 9.8 | 0.0051 | 2026-10-29 | The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC f | |
CVE-2024-51313 |
critical | 9.8 | 0.0051 | 2026-10-29 | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 f | |
CVE-2026-13380 |
critical | 9.0 | 0.0039 | 2026-10-29 | VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTT | |
CVE-2026-13381 |
high | 8.7 | 0.0037 | 2026-10-29 | VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulner | |
CVE-2026-47129 |
high | 8.1 | 0.0027 | 2026-10-29 | NextCRM is open-source customer relationship management (CRM) software. Versions prior to | |
CVE-2026-47130 |
high | 7.1 | 0.0020 | 2026-10-29 | NextCRM is open-source customer relationship management (CRM) software. Versions prior to | |
CVE-2026-53594 |
medium | 4.9 | 0.0042 | 2026-10-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeSco | |
CVE-2026-53595 |
critical | 9.4 | 0.0194 | 2026-10-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior t | |
CVE-2026-53596 |
medium | 5.3 | 0.0029 | 2026-10-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior t | |
CVE-2026-56452 |
high | 7.5 | 0.0077 | 2026-10-29 | Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java l | |
CVE-2026-56623 |
high | 7.1 | 0.0087 | 2026-10-29 | Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Ja | |
CVE-2026-56624 |
high | 7.3 | 0.0029 | 2026-10-29 | Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a J | |
CVE-2026-58624 |
medium | 5.4 | 0.0063 | 2026-10-29 | Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java libr |