Browse All CVEs
33,265 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-41885 |
medium | 6.5 | 0.0022 | 2026-10-29 | i18next-locize-backend is a simple i18next backend for locize.com which can be used in Nod | |
CVE-2026-42353 |
high | 8.2 | 0.0039 | 2026-10-29 | i18next-http-middleware is a middleware to be used with Node.js web frameworks like expres | |
CVE-2026-42794 |
low | 2.3 | 0.0028 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinth | |
CVE-2026-44499 |
high | 8.7 | 0.0035 | 2026-10-29 | ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, a composite denial | |
CVE-2026-41887 |
medium | 4.9 | 0.0047 | 2026-10-29 | Flarum is open-source forum software. Prior to versions 1.8.16 and 2.0.0-rc.1, Flarum's pa | |
CVE-2026-41889 |
low | 2.3 | 0.0036 | 2026-10-29 | pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can o | |
CVE-2026-42028 |
medium | 5.3 | 0.0040 | 2026-10-29 | novaGallery is a php image gallery. Prior to version 2.1.1, a path traversal vulnerability | |
CVE-2026-42072 |
critical | 9.8 | 0.0044 | 2026-10-29 | Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW se | |
CVE-2026-6659 |
high | 7.5 | 0.0045 | 2026-10-29 | Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts | |
CVE-2026-29201 |
— | — | 0.0043 | 2026-10-29 | Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` admin | |
CVE-2026-29202 |
medium | 5.3 | 0.0186 | 2026-10-29 | Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows | |
CVE-2026-29203 |
medium | 5.3 | 0.0049 | 2026-10-29 | A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowin | |
CVE-2026-41511 |
medium | 5.5 | 0.0019 | 2026-10-29 | OpenMcdf is a fully .NET / C# library to manipulate Compound File Binary File Format files | |
CVE-2026-8178 |
critical | 9.2 | 0.0060 | 2026-10-29 | An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain cond | |
CVE-2026-41495 |
medium | 5.3 | 0.0026 | 2026-10-29 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, pro | |
CVE-2026-42160 |
critical | 10.0 | 0.0032 | 2026-10-29 | Data Space Portal is an open-source Software as a Service (SaaS) solution designed to stre | |
CVE-2026-42176 |
medium | 6.7 | 0.0031 | 2026-10-29 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.67.0, Scool | |
CVE-2026-42180 |
medium | 6.3 | 0.0018 | 2026-10-29 | Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy al | |
CVE-2026-42181 |
medium | 6.5 | 0.0026 | 2026-10-29 | Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy fe | |
CVE-2026-42185 |
medium | 5.5 | 0.0032 | 2026-10-29 | People is an application to handle users and teams, and distribute permissions across La S | |
CVE-2026-42189 |
high | 7.5 | 0.0048 | 2026-10-29 | Russh is a Rust SSH client & server library. Prior to version 0.60.1, a pre-authentication | |
CVE-2026-42190 |
medium | 5.3 | 0.0011 | 2026-10-29 | RedwoodSDK is a server-first React framework. From version 1.0.0-beta.50 to before version | |
CVE-2026-42282 |
medium | 4.3 | 0.0025 | 2026-10-29 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, pro | |
CVE-2026-44694 |
high | 7.2 | 0.0024 | 2026-10-29 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, pro | |
CVE-2026-7807 |
high | 8.7 | 0.0030 | 2026-10-29 | SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability | |
CVE-2026-44400 |
high | 8.7 | 0.0035 | 2026-10-29 | MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnera | |
CVE-2026-42192 |
medium | 5.4 | 0.0018 | 2026-10-29 | Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, a | |
CVE-2026-42193 |
critical | 9.1 | 0.0013 | 2026-10-29 | Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, th | |
CVE-2026-42195 |
low | 3.4 | 0.0019 | 2026-10-29 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7 | |
CVE-2026-42199 |
medium | 6.2 | 0.0019 | 2026-10-29 | Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an in | |
CVE-2026-42202 |
medium | 6.5 | 0.0020 | 2026-10-29 | nova-toggle-5 enables fliping booleans in the index. Prior to version 1.3.0, the toggle en | |
CVE-2026-42206 |
medium | 5.7 | 0.0015 | 2026-10-29 | Roadiz is a polymorphic content management system based on a node system. Prior to version | |
CVE-2026-42209 |
medium | 6.5 | 0.0043 | 2026-10-29 | FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.2 | |
CVE-2026-42212 |
high | 7.1 | 0.0040 | 2026-10-29 | SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE f | |
CVE-2026-42213 |
medium | 5.1 | 0.0056 | 2026-10-29 | SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE f | |
CVE-2026-41432 |
high | 8.2 | 0.0085 | 2026-10-29 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset mana | |
CVE-2026-42224 |
high | 7.6 | 0.0026 | 2026-10-29 | ipl/web is a set of common web components for php projects. Prior to versions 0.13.1 and 0 | |
CVE-2026-42291 |
medium | 6.8 | 0.0019 | 2026-10-29 | SysReptor is a fully customizable pentest reporting platform. From version 2026.4 to befor | |
CVE-2026-8271 |
low | 2.0 | 0.0510 | 2026-10-29 | A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the func | |
CVE-2026-8272 |
low | 2.0 | 0.0614 | 2026-10-29 | A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function d | |
CVE-2026-8273 |
medium | 5.1 | 0.0739 | 2026-10-29 | A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_se | |
CVE-2026-8274 |
low | 1.9 | 0.0017 | 2026-10-29 | A security vulnerability has been detected in npitre cramfs-tools up to 2.1. Affected is t | |
CVE-2026-1677 |
medium | 5.3 | 0.0024 | 2026-10-29 | Zephyr sockets created with `IPPROTO_TLS_1_3` can still negotiate a TLS 1.2 connection whe | |
CVE-2026-5084 |
medium | 6.5 | 0.0033 | 2026-10-29 | WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely. T | |
CVE-2026-41018 |
medium | 6.5 | 0.0041 | 2026-10-29 | The Elasticsearch logging provider, when configured with a `host` URL that embeds credenti | |
CVE-2026-43826 |
medium | 6.5 | 0.0041 | 2026-10-29 | The OpenSearch logging provider, when configured with a `host` URL that embeds credentials | |
CVE-2026-26946 |
medium | 6.7 | 0.0010 | 2026-10-29 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, | |
CVE-2026-32658 |
high | 8.8 | 0.0024 | 2026-10-29 | Dell Automation Platform versions prior to 2.0.0.0, contains a missing authorization vulne | |
CVE-2026-35157 |
critical | 9.8 | 0.0032 | 2026-10-29 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, | |
CVE-2026-40636 |
high | 7.8 | 0.0022 | 2026-10-29 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, |