Browse All CVEs
33,293 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-57287 |
medium | 4.3 | 0.0019 | 2026-10-29 | Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact | |
CVE-2026-57288 |
low | 3.7 | 0.0033 | 2026-10-29 | Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before bu | |
CVE-2026-57289 |
medium | 4.8 | 0.0016 | 2026-10-29 | Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables | |
CVE-2026-57290 |
medium | 4.3 | 0.0025 | 2026-10-29 | A cross-site request forgery (CSRF) vulnerability in Jenkins Priority Sorter Plugin 936.v2 | |
CVE-2026-57291 |
medium | 5.4 | 0.0023 | 2026-10-29 | Missing permission checks in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allow | |
CVE-2026-57292 |
medium | 5.4 | 0.0014 | 2026-10-29 | A cross-site request forgery (CSRF) vulnerability in Jenkins Gitee Plugin 1288.v18b_deb_c9 | |
CVE-2026-57293 |
medium | 4.3 | 0.0027 | 2026-10-29 | An incorrect permission check in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier al | |
CVE-2026-57294 |
medium | 5.4 | 0.0025 | 2026-10-29 | A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlie | |
CVE-2026-57295 |
medium | 5.4 | 0.0022 | 2026-10-29 | A cross-site request forgery (CSRF) vulnerability in Jenkins EC2 Fleet Plugin 4.2.3.539.v8 | |
CVE-2026-57296 |
high | 8.8 | 0.0083 | 2026-10-29 | Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal | |
CVE-2026-57297 |
medium | 4.3 | 0.0025 | 2026-10-29 | A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 | |
CVE-2026-57298 |
medium | 5.4 | 0.0014 | 2026-10-29 | A cross-site request forgery (CSRF) vulnerability in Jenkins Contrast Continuous Applicati | |
CVE-2026-57299 |
medium | 4.3 | 0.0025 | 2026-10-29 | Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 | |
CVE-2026-57300 |
medium | 4.3 | 0.0028 | 2026-10-29 | A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier a | |
CVE-2026-57301 |
high | 8.8 | 0.0063 | 2026-10-29 | Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins contro | |
CVE-2026-57302 |
medium | 4.3 | 0.0028 | 2026-10-29 | Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml fi | |
CVE-2026-57303 |
high | 7.1 | 0.0036 | 2026-10-29 | Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML e | |
CVE-2026-57304 |
medium | 5.4 | 0.0025 | 2026-10-29 | A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers wit | |
CVE-2026-57305 |
medium | 5.4 | 0.0022 | 2026-10-29 | A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earli | |
CVE-2026-57306 |
medium | 4.2 | 0.0018 | 2026-10-29 | A cross-site request forgery (CSRF) vulnerability in Jenkins Zowe zDevOps Plugin 1.1.3.50. | |
CVE-2026-57307 |
medium | 4.2 | 0.0021 | 2026-10-29 | A missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and ear | |
CVE-2026-11877 |
medium | 6.3 | 0.0031 | 2026-10-29 | An unauthorized user can modify configuration through API calls that affects the OpenText | |
CVE-2026-11878 |
high | 8.2 | 0.0022 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-12986 |
high | 7.3 | 0.0027 | 2026-10-29 | A critical vulnerability in Admin GUI in Payara Server Full 4.x, 5.x, 6.x, 7.x, 7.2026.x, | |
CVE-2026-50698 |
medium | 4.6 | 0.0032 | 2026-10-29 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0. | |
CVE-2026-50699 |
medium | 4.6 | 0.0040 | 2026-10-29 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0. | |
CVE-2026-50700 |
medium | 4.6 | 0.0043 | 2026-10-29 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0. | |
CVE-2026-50701 |
medium | 5.1 | 0.0045 | 2026-10-29 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17 | |
CVE-2026-50703 |
medium | 4.8 | 0.0040 | 2026-10-29 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0. | |
CVE-2026-50704 |
medium | 4.6 | 0.0032 | 2026-10-29 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0. | |
CVE-2026-50705 |
medium | 4.6 | 0.0032 | 2026-10-29 | A Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev d | |
CVE-2026-50708 |
medium | 4.8 | 0.0030 | 2026-10-29 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0. | |
CVE-2026-50709 |
medium | 4.8 | 0.0030 | 2026-10-29 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0. | |
CVE-2026-50710 |
medium | 4.6 | 0.0032 | 2026-10-29 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0. | |
CVE-2026-50711 |
medium | 4.6 | 0.0032 | 2026-10-29 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0. | |
CVE-2026-50712 |
medium | 4.8 | 0.0030 | 2026-10-29 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0. | |
CVE-2026-55488 |
high | 7.7 | 0.0060 | 2026-10-29 | motionEye (mEye) is an online interface for a piece of software called "motion," which is | |
CVE-2026-56111 |
high | 8.3 | 0.0065 | 2026-10-29 | Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESH_BED_LEVELIN | |
CVE-2026-56121 |
critical | 9.3 | 0.0141 | 2026-10-29 | Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthent | |
CVE-2026-13164 |
high | 8.8 | 0.0071 | 2026-10-29 | Missing Authentication for Critical Function (CWE-306) in the RegisterView (apps/accounts/ | |
CVE-2026-52972 |
medium | 5.5 | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Cap | |
CVE-2026-53016 |
— | — | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV | |
CVE-2026-53055 |
critical | 9.8 | 0.0043 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec | |
CVE-2026-42217 |
medium | 6.3 | 0.0039 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-44601 |
high | 7.5 | 0.0034 | 2026-10-29 | Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client cra | |
CVE-2026-44602 |
high | 7.5 | 0.0033 | 2026-10-29 | Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of orde | |
CVE-2026-44603 |
critical | 9.1 | 0.0034 | 2026-10-29 | Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka T | |
CVE-2026-41139 |
high | 8.8 | 0.0058 | 2026-10-29 | Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to be | |
CVE-2026-41586 |
critical | 9.3 | 0.0053 | 2026-10-29 | Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for de | |
CVE-2026-8063 |
high | 7.1 | 0.0023 | 2026-10-29 | An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an em |