Browse All CVEs
33,265 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-8138 |
high | 7.4 | 0.0057 | 2026-10-29 | A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function form | |
CVE-2026-8148 |
high | 7.8 | 0.0009 | 2026-10-29 | NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate pri | |
CVE-2023-47268 |
medium | 5.3 | 0.0072 | 2026-10-29 | 2 PoC | In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf pro |
CVE-2024-27686 |
high | 7.5 | 0.0059 | 2026-10-29 | Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to ca | |
CVE-2024-30167 |
medium | 6.3 | 0.0114 | 2026-10-29 | /cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated u | |
CVE-2024-33288 |
high | 7.3 | 0.0092 | 2026-10-29 | Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerab | |
CVE-2024-33722 |
medium | 6.3 | 0.0024 | 2026-10-29 | SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php | |
CVE-2024-33724 |
medium | 5.4 | 0.0063 | 2026-10-29 | SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter | |
CVE-2024-45257 |
high | 7.3 | 0.0389 | 2026-10-29 | A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 al | |
CVE-2024-46507 |
high | 7.3 | 0.0392 | 2026-10-29 | A SSTI (server side template injection) vulnerability in the custom template export functi | |
CVE-2024-46508 |
high | 7.5 | 0.0043 | 2026-10-29 | yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secr | |
CVE-2024-51092 |
critical | 9.1 | 0.0718 | 2026-10-29 | LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command | |
CVE-2024-53326 |
high | 7.3 | 0.0049 | 2026-10-29 | LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.Auto | |
CVE-2023-46453 |
critical | 9.8 | 0.0090 | 2026-10-29 | Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in admini | |
CVE-2026-44916 |
low | 3.0 | 0.0034 | 2026-10-29 | In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info[ | |
CVE-2026-8069 |
high | 8.5 | 0.0012 | 2026-10-29 | PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vuln | |
CVE-2026-8149 |
medium | 5.1 | 0.0016 | 2026-10-29 | A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, A | |
CVE-2026-6213 |
critical | 10.0 | 0.0033 | 2026-10-29 | A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses | |
CVE-2026-3318 |
medium | 5.3 | 0.0034 | 2026-10-29 | Open redirection vulnerability in the latest demo version of the Cradle eCommerce platform | |
CVE-2026-8076 |
critical | 9.3 | 0.0032 | 2026-10-29 | Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the | |
CVE-2026-8153 |
critical | 9.8 | 0.0285 | 2026-10-29 | OS command injection in Dashboard Server interface in Universal Robots PolyScope versions | |
CVE-2026-25077 |
high | 8.8 | 0.0073 | 2026-10-29 | Account users are allowed by default to register templates to be downloaded directly to th | |
CVE-2026-25199 |
critical | 9.1 | 0.0050 | 2026-10-29 | Instances deployed via the Proxmox extension allow unauthorized access to instances belong | |
CVE-2026-8077 |
high | 8.6 | 0.0031 | 2026-10-29 | Lack of proper authorization implementation in the CashDro 3 web administration panel, ver | |
CVE-2026-32803 |
low | 3.3 | 0.0009 | 2026-10-29 | Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 | |
CVE-2026-39816 |
high | 7.5 | 0.0076 | 2026-10-29 | The optional extension component TinkerpopClientService is missing the Restricted annotati | |
CVE-2026-41161 |
medium | 6.9 | 0.0033 | 2026-10-29 | Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, | |
CVE-2026-41493 |
medium | 6.9 | 0.0039 | 2026-10-29 | YARD is a Ruby Documentation tool. Prior to version 0.9.42, a path traversal vulnerability | |
CVE-2026-41496 |
high | 8.1 | 0.0035 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.9 and praisonaiage | |
CVE-2026-41497 |
critical | 9.8 | 0.0054 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to version 4.6.9, the fix for PraisonAI's M | |
CVE-2026-41507 |
critical | 9.8 | 0.0039 | 2026-10-29 | math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string | |
CVE-2026-41509 |
medium | 6.9 | 0.0034 | 2026-10-29 | CROSS implementation contains reference and optimized implementations of the CROSS post-qu | |
CVE-2026-41512 |
critical | 9.9 | 0.0059 | 2026-10-29 | ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to befo | |
CVE-2026-44125 |
critical | 9.3 | 0.0039 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorization checks | |
CVE-2026-44126 |
critical | 9.2 | 0.0047 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.4 insecurely deserializes untrusted data | |
CVE-2026-44128 |
critical | 9.3 | 0.0085 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code e | |
CVE-2026-44129 |
high | 8.3 | 0.0053 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template inject | |
CVE-2026-44334 |
high | 8.4 | 0.0025 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 4.5.139 to before version 4.6.32, CV | |
CVE-2026-44335 |
high | 7.7 | 0.0038 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic i | |
CVE-2026-44339 |
high | 8.6 | 0.0036 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.37 and praisonaiag | |
CVE-2026-7864 |
medium | 6.9 | 0.1611 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables t | |
CVE-2026-41308 |
medium | 6.5 | 0.0029 | 2026-10-29 | Password Pusher is an open source application to communicate sensitive information over th | |
CVE-2026-41524 |
high | 8.7 | 0.0026 | 2026-10-29 | Brave CMS is an open-source CMS. Prior to commit 6c56603, page and article body content en | |
CVE-2026-41570 |
high | 7.8 | 0.0019 | 2026-10-29 | PHPUnit is a testing framework for PHP. In versions 12.5.21 and 13.1.5, PHPUnit forwards P | |
CVE-2026-41576 |
high | 7.1 | 0.0027 | 2026-10-29 | Brave CMS is an open-source CMS. Prior to commit 6c56603, the contact form is publicly acc | |
CVE-2026-41583 |
critical | 9.3 | 0.0028 | 2026-10-29 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to | |
CVE-2026-44500 |
medium | 5.3 | 0.0036 | 2026-10-29 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0, prior to ze | |
CVE-2026-41070 |
critical | 10.0 | 0.0044 | 2026-10-29 | openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle a | |
CVE-2026-41683 |
high | 8.6 | 0.0033 | 2026-10-29 | i18next-http-middleware is a middleware to be used with Node.js web frameworks like expres | |
CVE-2026-41690 |
high | 8.6 | 0.0031 | 2026-10-29 | 18next-http-middleware is a middleware to be used with Node.js web frameworks like express |