Browse All CVEs
33,680 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-9716 |
high | 8.7 | 0.0046 | 2026-10-29 | CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service | |
CVE-2026-9717 |
high | 8.6 | 0.0173 | 2026-10-29 | CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') v | |
CVE-2026-9718 |
medium | 6.9 | 0.0043 | 2026-10-29 | CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacke | |
CVE-2026-13350 |
low | 2.3 | 0.0027 | 2026-10-29 | Permissions where checked incorrectly during room creation, allowing attackers to create r | |
CVE-2026-13351 |
high | 7.5 | 0.0049 | 2026-10-29 | Zephyr's IPv6 network stack can be prevented from receiving or processing future incoming | |
CVE-2026-45233 |
high | 7.2 | 0.0090 | 2026-10-29 | HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged | |
CVE-2026-54024 |
medium | 6.5 | 0.0044 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-54025 |
medium | 5.4 | 0.0024 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-54027 |
medium | 6.5 | 0.0032 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-54029 |
medium | 6.5 | 0.0027 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-54030 |
critical | 9.3 | 0.0017 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.5 | |
CVE-2026-54033 |
medium | 6.5 | 0.0035 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-54037 |
medium | 6.5 | 0.0051 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-54040 |
high | 7.1 | 0.0026 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-54448 |
medium | 6.9 | 0.0044 | 2026-10-29 | Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive (.tgz) | |
CVE-2026-55092 |
high | 7.0 | 0.0044 | 2026-10-29 | Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it use | |
CVE-2026-55413 |
critical | 9.4 | 0.0032 | 2026-10-29 | ToolJet is the open-source foundation am AI-native platform for building and deploying int | |
CVE-2026-55439 |
medium | 5.5 | 0.0041 | 2026-10-29 | Halo is an open source website building tool. Prior to 2.24.3, a path traversal vulnerabil | |
CVE-2026-47770 |
medium | 6.8 | 0.0015 | 2026-10-29 | jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nes | |
CVE-2026-49839 |
high | 7.1 | 0.0016 | 2026-10-29 | jq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can turn a handled ove | |
CVE-2026-54679 |
medium | 6.9 | 0.0015 | 2026-10-29 | jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvp_string_append ha | |
CVE-2026-55967 |
low | 2.0 | 0.0018 | 2026-10-29 | AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 Gi | |
CVE-2026-12897 |
high | 8.4 | 0.0018 | 2026-10-29 | Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Rea | |
CVE-2026-12921 |
high | 8.4 | 0.0019 | 2026-10-29 | In AzeoTech DAQFactory versions 21.1 and prior, a Use After Free vulnerability can be expl | |
CVE-2026-28898 |
medium | 5.3 | 0.0031 | 2026-10-29 | swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for contr | |
CVE-2026-46606 |
high | 7.8 | 0.0019 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glanc | |
CVE-2026-46607 |
high | 7.8 | 0.0019 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/o | |
CVE-2026-46608 |
high | 7.4 | 0.0040 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glanc | |
CVE-2026-46611 |
medium | 5.3 | 0.0014 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glanc | |
CVE-2026-4930 |
high | 7.1 | 0.0014 | 2026-10-29 | SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that a | |
CVE-2026-53925 |
high | 7.8 | 0.0019 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. From 4.0.8 until 4.5.5, t | |
CVE-2026-54250 |
medium | 5.8 | 0.0017 | 2026-10-29 | K3s is a fully conformant production-ready Kubernetes distribution. Prior to 1.35.3+k3s1, | |
CVE-2026-56766 |
high | 8.6 | 0.0244 | 2026-10-29 | Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authe | |
CVE-2026-56767 |
high | 8.7 | 0.0060 | 2026-10-29 | Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability | |
CVE-2026-56768 |
high | 8.7 | 0.0071 | 2026-10-29 | Seahub before 13.0.23 does not enforce SHARE_LINK_LOGIN_REQUIRED on GET /api/v2.1/share-li | |
CVE-2026-56769 |
medium | 6.3 | 0.0037 | 2026-10-29 | Huly Platform through 0.7.423, fixed in commit 68cbf8a contains an authenticated server-si | |
CVE-2026-56770 |
high | 8.7 | 0.0058 | 2026-10-29 | libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index | |
CVE-2026-56771 |
medium | 6.3 | 0.0035 | 2026-10-29 | NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the | |
CVE-2026-56772 |
medium | 5.3 | 0.0033 | 2026-10-29 | NewsBlur before 14.5.0 contains a broken access control vulnerability that allows authenti | |
CVE-2026-56779 |
medium | 5.3 | 0.0029 | 2026-10-29 | MaxKB before 2.10.0 contains a server-side request forgery vulnerability in tool creation | |
CVE-2026-56786 |
critical | 9.3 | 0.0071 | 2026-10-29 | RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 func | |
CVE-2026-56787 |
medium | 6.9 | 0.0056 | 2026-10-29 | RTKLIB through 2.4.3 contains an off-by-one out-of-bounds read vulnerability in the decode | |
CVE-2026-56788 |
medium | 4.8 | 0.0017 | 2026-10-29 | RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function w | |
CVE-2026-56789 |
high | 7.1 | 0.0042 | 2026-10-29 | RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb func | |
CVE-2026-56790 |
high | 7.0 | 0.0031 | 2026-10-29 | CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overfl | |
CVE-2026-57700 |
critical | 10.0 | 0.0052 | 2026-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in Daan.Dev OMGF Pro allows | |
CVE-2026-2299 |
medium | 4.3 | 0.0020 | 2026-10-29 | The Mattermost Google Drive plugin before version 1.1.0 fails to validate channel membersh | |
CVE-2026-37453 |
high | 7.5 | 0.0054 | 2026-10-29 | Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a re | |
CVE-2026-37454 |
high | 7.5 | 0.0034 | 2026-10-29 | Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a re | |
CVE-2026-46601 |
high | 7.5 | 0.0061 | 2026-10-29 | The webp decoder can panic when processing a VP8 chunk with dimensions that do not match t |