Browse All CVEs
33,292 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2024-43384 |
high | 8.0 | 0.0034 | 2026-10-29 | A low privileged remote attacker can gain the root password due to improper removal of sen | |
CVE-2026-27329 |
medium | 5.3 | 0.0032 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wi | |
CVE-2026-27416 |
medium | 5.3 | 0.0018 | 2026-10-29 | Missing Authorization vulnerability in bPlugins PDF Poster allows Exploiting Incorrectly C | |
CVE-2026-44407 |
high | 7.5 | 0.0027 | 2026-10-29 | A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, whi | |
CVE-2026-6805 |
medium | 6.9 | 0.0023 | 2026-10-29 | Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sh | |
CVE-2026-27415 |
medium | 4.3 | 0.0009 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Req | |
CVE-2026-3953 |
high | 8.8 | 0.0034 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-41642 |
high | 7.5 | 0.0050 | 2026-10-29 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming | |
CVE-2026-41643 |
high | 7.5 | 0.0054 | 2026-10-29 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming | |
CVE-2026-42010 |
high | 7.1 | 0.0105 | 2026-10-29 | A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-S | |
CVE-2026-42285 |
high | 7.5 | 0.0042 | 2026-10-29 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming | |
CVE-2026-6508 |
critical | 9.8 | 0.0022 | 2026-10-29 | Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Ins | |
CVE-2026-8090 |
— | — | 0.0032 | 2026-10-29 | Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 1 | |
CVE-2026-8091 |
— | — | 0.0047 | 2026-10-29 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability w | |
CVE-2026-8092 |
— | — | 0.0041 | 2026-10-29 | Memory safety bugs present in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. Some of th | |
CVE-2026-8093 |
— | — | 0.0032 | 2026-10-29 | Memory safety bugs present in Thunderbird 150.0.1. Some of these bugs showed evidence of m | |
CVE-2026-8094 |
— | — | 0.0045 | 2026-10-29 | Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 | |
CVE-2026-30496 |
critical | 9.8 | 0.0033 | 2026-10-29 | The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01, Android 8.0.0) exposes an | |
CVE-2026-41490 |
high | 8.3 | 0.0027 | 2026-10-29 | Dagster is an orchestration platform for the development, production, and observation of d | |
CVE-2026-41554 |
high | 7.1 | 0.0014 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-41589 |
critical | 9.6 | 0.0039 | 2026-10-29 | Wish is an SSH server with defaults and a collection of middlewares. From version 2.0.0 to | |
CVE-2026-41647 |
medium | 6.5 | 0.0039 | 2026-10-29 | Incus is a system container and virtual machine manager. Prior to version 7.0.0, a missing | |
CVE-2026-41648 |
medium | 5.3 | 0.0027 | 2026-10-29 | Incus is a system container and virtual machine manager. Prior to version 7.0.0, user prov | |
CVE-2026-41684 |
medium | 6.5 | 0.0041 | 2026-10-29 | Incus is a system container and virtual machine manager. Prior to version 7.0.0, backup.Ge | |
CVE-2026-41685 |
medium | 4.3 | 0.0033 | 2026-10-29 | Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads o | |
CVE-2025-63706 |
critical | 9.8 | 0.0152 | 2026-10-29 | NPM package next-npm-version1.0.1 is vulnerable to Command injection. | |
CVE-2026-32686 |
medium | 6.9 | 0.0048 | 2026-10-29 | Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated r | |
CVE-2026-41505 |
high | 8.7 | 0.0026 | 2026-10-29 | RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to | |
CVE-2026-41519 |
medium | 5.4 | 0.0027 | 2026-10-29 | Weblate is a web based localization tool. Prior to version 5.17.1, when a user changes the | |
CVE-2026-41650 |
medium | 6.1 | 0.0024 | 2026-10-29 | fast-xml-parser allows users to process XML from JS object without C/C++ based libraries o | |
CVE-2026-41654 |
medium | 5.3 | 0.0037 | 2026-10-29 | Weblate is a web based localization tool. Prior to version 5.17.1, an authenticated user w | |
CVE-2026-41687 |
medium | 4.3 | 0.0020 | 2026-10-29 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4. | |
CVE-2026-41688 |
high | 7.7 | 0.0023 | 2026-10-29 | Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 a | |
CVE-2026-41689 |
medium | 6.0 | 0.0018 | 2026-10-29 | Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 a | |
CVE-2026-42011 |
high | 7.4 | 0.0047 | 2026-10-29 | A flaw was found in gnutls. This vulnerability occurs because permitted name constraints w | |
CVE-2026-44263 |
medium | 4.3 | 0.0034 | 2026-10-29 | Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, | |
CVE-2026-44264 |
medium | 4.3 | 0.0027 | 2026-10-29 | Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer u | |
CVE-2026-5786 |
high | 8.8 | 0.1120 | 2026-10-29 | An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1 | |
CVE-2026-5787 |
critical | 9.1 | 0.0069 | 2026-10-29 | An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and | |
CVE-2026-5788 |
critical | 9.8 | 0.0082 | 2026-10-29 | An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 | |
CVE-2026-6973 |
high | 7.2 | 0.3445 | 2026-10-29 | KEV | Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability |
CVE-2026-7821 |
critical | 9.1 | 0.0051 | 2026-10-29 | Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12. | |
CVE-2026-7413 |
critical | 9.8 | 0.0058 | 2026-10-29 | A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, una | |
CVE-2026-7414 |
critical | 9.8 | 0.0053 | 2026-10-29 | Yarbo firmware v2.3.9 contains hardcoded administrative credentials embedded in the firmwa | |
CVE-2026-7415 |
critical | 9.8 | 0.0054 | 2026-10-29 | The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymous connect | |
CVE-2026-8081 |
low | 2.1 | 0.0022 | 2026-10-29 | A vulnerability has been found in router-for-me CLIProxyAPI 6.9.29. Affected by this issue | |
CVE-2026-41653 |
high | 7.0 | 0.0036 | 2026-10-29 | BentoPDF is a client-side PDF toolkit that is self hostable. Prior to version 2.8.3, a cro | |
CVE-2026-42214 |
high | 7.8 | 0.0024 | 2026-10-29 | Notepad Next is a cross-platform, reimplementation of Notepad++. Prior to version 0.14, No | |
CVE-2026-8083 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This | |
CVE-2026-8084 |
low | 1.9 | 0.0026 | 2026-10-29 | A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects |