Browse All CVEs
34,015 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-58472 |
medium | 6.0 | 0.0039 | 2026-10-29 | GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerab | |
CVE-2026-58473 |
critical | 9.3 | 0.0051 | 2026-10-29 | Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthen | |
CVE-2026-58583 |
high | 8.4 | 0.0014 | 2026-10-29 | FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0. | |
CVE-2026-59707 |
critical | 9.2 | 0.0138 | 2026-10-29 | LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST | |
CVE-2026-42953 |
high | 8.4 | 0.0018 | 2026-10-29 | The application contains an out-of-bounds write vulnerability that can be exploited by an | |
CVE-2026-42958 |
high | 8.4 | 0.0019 | 2026-10-29 | The application contains a use-after-free vulnerability that can be exploited to cause mem | |
CVE-2026-49033 |
high | 8.4 | 0.0018 | 2026-10-29 | The application contains a stack-based buffer overflow vulnerability that can be exploited | |
CVE-2026-49229 |
high | 8.3 | 0.0032 | 2026-10-29 | Actual is a local-first personal finance app. Prior to 26.6.0, in OpenID multi-user mode, | |
CVE-2026-50179 |
medium | 4.2 | 0.0029 | 2026-10-29 | Actual is a local-first personal finance tool. Prior to 26.6.0, exportToCSV and exportQuer | |
CVE-2026-54601 |
medium | 6.3 | 0.0030 | 2026-10-29 | FastGPT is an open source AI knowledge base platform. From 4.14.17 to before 4.15.0-beta4, | |
CVE-2026-54602 |
high | 7.1 | 0.0036 | 2026-10-29 | FastGPT is a knowledge-based AI application platform. Prior to 4.15.0, GET /api/core/ai/re | |
CVE-2026-54607 |
high | 7.7 | 0.0037 | 2026-10-29 | FastGPT is a knowledge-based AI application platform. Prior to 4.15.0-beta4, the HTTP-tool | |
CVE-2026-54698 |
medium | 6.0 | 0.0027 | 2026-10-29 | Hasura is an open-source product that provides users GraphQL or REST APIs. Prior to 2.49.2 | |
CVE-2026-55418 |
high | 8.6 | 0.0048 | 2026-10-29 | FastGPT is an open source AI knowledge base platform. Prior to v4.15.0-beta5, two FastGPT | |
CVE-2026-58266 |
medium | 6.5 | 0.0022 | 2026-10-29 | Anki is a program for creating and reviewing flashcards. Prior to 25.09.4, Anki's webview- | |
CVE-2026-59153 |
low | 2.1 | 0.0026 | 2026-10-29 | Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, Anki launches a | |
CVE-2026-14380 |
high | 8.8 | 0.0050 | 2026-10-29 | DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced | |
CVE-2026-14739 |
critical | 9.8 | 0.0041 | 2026-10-29 | DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements wit | |
CVE-2026-14740 |
critical | 9.1 | 0.0066 | 2026-10-29 | DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting a | |
CVE-2026-14895 |
high | 7.5 | 0.0063 | 2026-10-29 | String::Util versions before 1.36 for Perl are susceptible to a regular expression denial | |
CVE-2026-36163 |
medium | 5.4 | 0.0017 | 2026-10-29 | An HTML injection vulnerability in the file view endpoint of LiquidFiles v4.2.7 allows aut | |
CVE-2026-59705 |
critical | 9.3 | 0.0064 | 2026-10-29 | mem0's openmemory/api component contains an unauthenticated access vulnerability that allo | |
CVE-2026-56843 |
critical | 9.9 | 0.0066 | 2026-10-29 | Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low- | |
CVE-2026-59995 |
medium | 5.4 | 0.0025 | 2026-10-29 | sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files w | |
CVE-2026-59996 |
medium | 5.4 | 0.0025 | 2026-10-29 | scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directo | |
CVE-2026-59997 |
medium | 5.4 | 0.0018 | 2026-10-29 | internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line argu | |
CVE-2026-59998 |
medium | 6.5 | 0.0018 | 2026-10-29 | sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAc | |
CVE-2026-59999 |
high | 7.5 | 0.0016 | 2026-10-29 | In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over | |
CVE-2026-60000 |
high | 7.5 | 0.0062 | 2026-10-29 | sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource | |
CVE-2026-60001 |
medium | 6.5 | 0.0029 | 2026-10-29 | sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. | |
CVE-2026-60002 |
critical | 9.4 | 0.0030 | 2026-10-29 | ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key du | |
CVE-2026-56437 |
high | 8.4 | 0.0018 | 2026-10-29 | Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a cra | |
CVE-2026-57895 |
high | 8.5 | 0.0016 | 2026-10-29 | Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker | |
CVE-2026-9695 |
critical | 9.8 | 0.0061 | 2026-10-29 | An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through | |
CVE-2026-56001 |
high | 8.8 | 0.0039 | 2026-10-29 | A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowi | |
CVE-2026-6280 |
medium | 6.5 | 0.0038 | 2026-10-29 | Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT I | |
CVE-2026-56002 |
high | 8.8 | 0.0043 | 2026-10-29 | A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 befor | |
CVE-2026-56003 |
high | 8.8 | 0.0040 | 2026-10-29 | A heap buffer overflow due to missing size checking in the property buffer when parsing PC | |
CVE-2026-41042 |
critical | 9.1 | 0.0151 | 2026-10-29 | Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, | |
CVE-2026-6371 |
medium | 4.8 | 0.0023 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-14454 |
critical | 9.8 | 0.0066 | 2026-10-29 | Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Ima | |
CVE-2026-8307 |
critical | 9.8 | 0.0047 | 2026-10-29 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulne | |
CVE-2026-8310 |
medium | 6.1 | 0.0025 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-8315 |
medium | 5.4 | 0.0023 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-15033 |
medium | 5.3 | 0.0182 | 2026-10-29 | A flaw has been found in christopherthielen check-peer-dependencies up to 4.3.4. Affected | |
CVE-2026-15034 |
low | 2.1 | 0.0029 | 2026-10-29 | A vulnerability has been found in flask-dashboard Flask-MonitoringDashboard up to 5.0.2. A | |
CVE-2026-15035 |
low | 1.9 | 0.0222 | 2026-10-29 | A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_c | |
CVE-2026-15053 |
high | 7.5 | 0.0046 | 2026-10-29 | Tanium addressed a denial of service vulnerability in Tanium Server. | |
CVE-2026-22927 |
high | 7.8 | 0.0018 | 2026-10-29 | Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnera | |
CVE-2026-41122 |
high | 7.1 | 0.0028 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 |