Browse All CVEs
33,233 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-39869 |
medium | 4.3 | 0.0028 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 a | |
CVE-2026-39870 |
high | 7.5 | 0.0031 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-39871 |
high | 7.5 | 0.0031 | 2026-10-29 | A path handling issue was addressed with improved logic. This issue is fixed in macOS Sequ | |
CVE-2026-42888 |
medium | 6.9 | 0.0033 | 2026-10-29 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the podcast | |
CVE-2026-43652 |
high | 7.5 | 0.0024 | 2026-10-29 | A permissions issue was addressed with additional restrictions. This issue is fixed in mac | |
CVE-2026-43653 |
medium | 6.2 | 0.0019 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 a | |
CVE-2026-43654 |
high | 7.5 | 0.0035 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 a | |
CVE-2026-43655 |
high | 7.3 | 0.0037 | 2026-10-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in | |
CVE-2026-43656 |
high | 7.3 | 0.0027 | 2026-10-29 | An out-of-bounds write issue was addressed with improved input validation. This issue is f | |
CVE-2026-43658 |
— | — | 0.0032 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, | |
CVE-2026-43659 |
medium | 4.7 | 0.0010 | 2026-10-29 | A race condition was addressed with additional validation. This issue is fixed in iOS 18.7 | |
CVE-2026-43660 |
high | 7.5 | 0.0027 | 2026-10-29 | A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, | |
CVE-2026-43661 |
high | 7.5 | 0.0126 | 2026-10-29 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed i | |
CVE-2026-43666 |
medium | 6.2 | 0.0015 | 2026-10-29 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi | |
CVE-2026-43668 |
high | 7.5 | 0.0112 | 2026-10-29 | A use after free issue was addressed with improved memory management. This issue is fixed | |
CVE-2026-43874 |
high | 7.2 | 0.0029 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, the se | |
CVE-2026-42046 |
high | 7.8 | 0.0037 | 2026-10-29 | libcaca is a colour ASCII art library. In 0.99.beta20 and earlier, an integer overflow vul | |
CVE-2026-42188 |
medium | 4.3 | 0.0019 | 2026-10-29 | Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Prior t | |
CVE-2026-42564 |
high | 8.2 | 0.0116 | 2026-10-29 | jotty·page is a self-hosted app for your checklists and notes. Prior to 1.22.0, an unauthe | |
CVE-2026-43873 |
high | 7.5 | 0.0032 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin | |
CVE-2026-43875 |
medium | 6.8 | 0.0033 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin | |
CVE-2026-43876 |
medium | 6.4 | 0.0019 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, object | |
CVE-2026-43877 |
medium | 5.4 | 0.0014 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, object | |
CVE-2026-43878 |
medium | 6.1 | 0.0025 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin | |
CVE-2026-43879 |
medium | 5.4 | 0.0020 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, an aut | |
CVE-2026-43880 |
medium | 5.3 | 0.0029 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, object | |
CVE-2026-43881 |
medium | 5.3 | 0.0032 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, object | |
CVE-2026-43882 |
medium | 4.3 | 0.0021 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, the un | |
CVE-2026-43883 |
medium | 4.2 | 0.0020 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin | |
CVE-2026-43884 |
high | 7.7 | 0.0035 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, two en | |
CVE-2026-43885 |
high | 7.7 | 0.0034 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, an una | |
CVE-2026-43893 |
high | 8.2 | 0.0049 | 2026-10-29 | exiftool-vendored provides cross-platform Node.js access to ExifTool. Prior to 35.19.0, ex | |
CVE-2026-43897 |
high | 8.7 | 0.0065 | 2026-10-29 | Link Preview JS extracts web links information. Prior to 4.0.1, the library did not check | |
CVE-2026-7010 |
medium | 6.5 | 0.0023 | 2026-10-29 | HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or co | |
CVE-2026-8344 |
low | 2.1 | 0.0347 | 2026-10-29 | A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this | |
CVE-2026-42554 |
medium | 5.3 | 0.0021 | 2026-10-29 | Fiber is a web framework for Go. Prior to 2.52.12 and 3.1.0, Cross-Site Scripting vulnerab | |
CVE-2026-43899 |
critical | 9.6 | 0.0040 | 2026-10-29 | DeepChat is an open-source artificial intelligence agent platform that unifies models, too | |
CVE-2026-43900 |
critical | 9.3 | 0.0037 | 2026-10-29 | DeepChat is an open-source artificial intelligence agent platform that unifies models, too | |
CVE-2026-43901 |
medium | 6.8 | 0.0034 | 2026-10-29 | Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, the | |
CVE-2026-43911 |
high | 8.1 | 0.0022 | 2026-10-29 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, refresh tok | |
CVE-2026-43912 |
high | 8.7 | 0.0029 | 2026-10-29 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, Vaultwarden | |
CVE-2026-43913 |
high | 8.1 | 0.0027 | 2026-10-29 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, Vaultwarden | |
CVE-2026-43914 |
critical | 9.8 | 0.0029 | 2026-10-29 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.4, there is a | |
CVE-2026-8345 |
low | 2.1 | 0.0347 | 2026-10-29 | A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210. Affec | |
CVE-2026-8346 |
low | 2.1 | 0.0340 | 2026-10-29 | A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the fu | |
CVE-2026-8349 |
low | 2.1 | 0.0031 | 2026-10-29 | A flaw has been found in omec-project amf up to 2.1.1. This vulnerability affects unknown | |
CVE-2026-45321 |
critical | 9.6 | 0.0328 | 2026-10-29 | KEV | TanStack contains an unspecified vulnerability that allowed malicious versions of the prod |
CVE-2026-45362 |
low | 3.2 | 0.0009 | 2026-10-29 | Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup f | |
CVE-2026-45391 |
high | 8.5 | 0.0089 | 2026-10-29 | A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 al | |
CVE-2026-45392 |
high | 8.4 | 0.0028 | 2026-10-29 | DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacke |