Browse All CVEs
33,264 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-61312 |
high | 7.3 | 0.0029 | 2026-10-29 | A reflected cross-site scripted (XSS) vulnerability in the acc-menu_pricess.php component | |
CVE-2025-61313 |
high | 7.3 | 0.0029 | 2026-10-29 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_markeralerts.php compo | |
CVE-2025-61314 |
high | 7.3 | 0.0029 | 2026-10-29 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_orderopt.php component | |
CVE-2025-65415 |
medium | 5.4 | 0.0022 | 2026-10-29 | docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack vi | |
CVE-2025-65416 |
medium | 6.3 | 0.0027 | 2026-10-29 | docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pm | |
CVE-2025-65417 |
medium | 6.1 | 0.0024 | 2026-10-29 | docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scrip | |
CVE-2025-65418 |
high | 7.5 | 0.0064 | 2026-10-29 | docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowi | |
CVE-2026-34086 |
low | 2.1 | 0.0024 | 2026-10-29 | Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * | |
CVE-2026-34087 |
medium | 5.1 | 0.0027 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-34088 |
low | 1.3 | 0.0029 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-34089 |
low | 2.3 | 0.0035 | 2026-10-29 | Vulnerability in Wikimedia Foundation Scribunto. This issue affects Scribunto: from 1.45. | |
CVE-2026-34090 |
medium | 4.8 | 0.0028 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-34091 |
medium | 5.5 | 0.0029 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-34092 |
low | 2.1 | 0.0024 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-3319 |
medium | 5.1 | 0.0032 | 2026-10-29 | Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce pl | |
CVE-2026-3320 |
medium | 5.1 | 0.0032 | 2026-10-29 | Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce pl | |
CVE-2026-42607 |
critical | 9.1 | 0.0438 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with admin | |
CVE-2026-42608 |
high | 8.8 | 0.0060 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, there is a Path Traversal vulner | |
CVE-2026-42609 |
high | 8.1 | 0.0046 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a business logic vulnerability i | |
CVE-2026-42610 |
medium | 6.5 | 0.0029 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged user (EX: Conte | |
CVE-2026-42611 |
high | 8.9 | 0.0030 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged (with the abili | |
CVE-2026-42612 |
medium | 5.4 | 0.0024 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a stored Cross-Site Scripting (X | |
CVE-2026-42613 |
critical | 9.4 | 0.0114 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, the Login::register() method in | |
CVE-2026-42841 |
medium | 6.9 | 0.0042 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with page | |
CVE-2026-44643 |
critical | 9.3 | 0.0048 | 2026-10-29 | Angular Expressions provides expressions for the Angular.JS web framework as a standalone | |
CVE-2026-6093 |
medium | 6.0 | 0.0028 | 2026-10-29 | Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend | |
CVE-2026-7813 |
critical | 9.4 | 0.0046 | 2026-10-29 | Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Sha | |
CVE-2026-7814 |
medium | 4.8 | 0.0016 | 2026-10-29 | Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visu | |
CVE-2026-7815 |
high | 8.7 | 0.0046 | 2026-10-29 | SQL injection vulnerability in pgAdmin 4 Maintenance Tool. Four user-supplied JSON fields | |
CVE-2026-7816 |
high | 8.7 | 0.0144 | 2026-10-29 | OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export. User | |
CVE-2026-7817 |
high | 7.1 | 0.0022 | 2026-10-29 | Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdm | |
CVE-2026-7818 |
high | 7.3 | 0.0013 | 2026-10-29 | Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager. The se | |
CVE-2026-7819 |
high | 7.2 | 0.0032 | 2026-10-29 | Symbolic-link path traversal (CWE-61, CWE-22) in pgAdmin 4 File Manager. check_access_per | |
CVE-2026-7820 |
medium | 6.9 | 0.0021 | 2026-10-29 | Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4. pgAdmin | |
CVE-2026-33356 |
high | 7.7 | 0.0027 | 2026-10-29 | In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privile | |
CVE-2026-33357 |
high | 7.5 | 0.0024 | 2026-10-29 | In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5.0 build 22 | |
CVE-2026-33359 |
high | 7.5 | 0.0029 | 2026-10-29 | In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service ve | |
CVE-2026-33361 |
high | 7.5 | 0.0017 | 2026-10-29 | In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220 | |
CVE-2026-33362 |
high | 8.6 | 0.0024 | 2026-10-29 | In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), | |
CVE-2026-42349 |
high | 7.6 | 0.0025 | 2026-10-29 | Clerk JavaScript is the official JavaScript repository for Clerk authentication. has(), au | |
CVE-2026-42603 |
high | 8.8 | 0.0025 | 2026-10-29 | OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, | |
CVE-2026-42842 |
medium | 5.4 | 0.0018 | 2026-10-29 | The form plugin for Grav adds the ability to create and use forms. Prior to 9.1.0, a Store | |
CVE-2026-42843 |
high | 8.8 | 0.0035 | 2026-10-29 | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your s | |
CVE-2026-42845 |
high | 7.7 | 0.0074 | 2026-10-29 | The form plugin for Grav adds the ability to create and use forms. Prior to 9.1.0 , there | |
CVE-2026-44737 |
medium | 6.2 | 0.0032 | 2026-10-29 | grav-plugin-admin is the admin plugin for Grav is an HTML user interface that provides a c | |
CVE-2026-44738 |
high | 7.7 | 0.0028 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the Twig sandbox allow-list permit | |
CVE-2026-34093 |
low | 1.1 | 0.0023 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-34094 |
low | 2.0 | 0.0017 | 2026-10-29 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p | |
CVE-2026-34095 |
none | — | 0.0018 | 2026-10-29 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p | |
CVE-2026-3048 |
medium | 5.1 | 0.0017 | 2026-10-29 | An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus |