Browse All CVEs
33,177 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-44515 |
low | 2.3 | 0.0019 | 2026-10-29 | Nextcloud News is an RSS/Atom feed reader. Prior to 28.3.0-beta.1, Nextcloud News allows a | |
CVE-2026-44516 |
high | 7.6 | 0.0020 | 2026-10-29 | Valtimo is an open-source business process automation platform. From 12.4.0 to 12.33.0 and | |
CVE-2026-44827 |
high | 8.8 | 0.0072 | 2026-10-29 | Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, diffusers 0. | |
CVE-2026-45448 |
medium | 4.3 | 0.0017 | 2026-10-29 | CWE-601 URL redirection to untrusted site ('open redirect') | |
CVE-2026-6923 |
low | 3.8 | 0.0012 | 2026-10-29 | A side-channel attack, which requires a physical presence to the TPM, can lead to extracti | |
CVE-2026-41615 |
high | 7.4 | 0.0056 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allo | |
CVE-2026-42334 |
high | 7.5 | 0.0027 | 2026-10-29 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment | |
CVE-2026-42598 |
medium | 6.9 | 0.0032 | 2026-10-29 | Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and T | |
CVE-2026-42897 |
medium | 6.1 | 0.7066 | 2026-10-29 | KEV | Microsoft Exchange Server contains a cross-site scripting vulnerability during web page ge |
CVE-2026-44520 |
medium | 5.7 | 0.0019 | 2026-10-29 | Docling-Graph turns documents into validated Pydantic objects, then builds a directed know | |
CVE-2026-44542 |
critical | 9.1 | 0.0052 | 2026-10-29 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-stable | |
CVE-2026-46469 |
medium | 5.5 | 0.0010 | 2026-10-29 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audi | |
CVE-2026-46470 |
critical | 9.1 | 0.0021 | 2026-10-29 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audi | |
CVE-2026-6332 |
medium | 6.8 | 0.0013 | 2026-10-29 | CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause | |
CVE-2026-22599 |
critical | 9.3 | 0.0118 | 2026-10-29 | Strapi is an open source headless content management system. In versions on the 4.x branch | |
CVE-2026-22706 |
low | 2.1 | 0.0034 | 2026-10-29 | Strapi is an open source headless content management system. In Strapi versions prior to 5 | |
CVE-2026-22707 |
medium | 5.3 | 0.0019 | 2026-10-29 | Strapi is an open source headless content management system. In Strapi versions prior to 5 | |
CVE-2026-23998 |
high | 8.2 | 0.0021 | 2026-10-29 | Fleet is open source device management software. Prior to version 4.81.0, a vulnerability | |
CVE-2026-27680 |
medium | 4.3 | 0.0017 | 2026-10-29 | Due to improper input handling under certain conditions, SAP NetWeaver Application Server | |
CVE-2026-41315 |
critical | 9.3 | 0.0103 | 2026-10-29 | mdserver-web is a simple Linux panel. From 0.18.0 to 0.18.4, mdserver-web has a front-end | |
CVE-2026-44522 |
high | 8.6 | 0.0056 | 2026-10-29 | Note Mark is an open-source note-taking application. From 0.13.0 to before 0.19.4, the Not | |
CVE-2026-44523 |
critical | 10.0 | 0.0015 | 2026-10-29 | Note Mark is an open-source note-taking application. Prior to 0.19.4, no minimum length or | |
CVE-2026-44589 |
low | 3.7 | 0.0017 | 2026-10-29 | Nuxt OG Image generates OG Images with Vue templates in Nuxt. The isBlockedUrl() denylist | |
CVE-2026-44592 |
critical | 9.4 | 0.0016 | 2026-10-29 | Gradient is a nix-based continuous integration system. In 1.1.0, when GRADIENT_DISCOVERABL | |
CVE-2026-8621 |
high | 8.7 | 0.0036 | 2026-10-29 | Crabbox prior to v0.12.0 contains an authentication bypass vulnerability that allows non-a | |
CVE-2026-24000 |
medium | 6.9 | 0.0043 | 2026-10-29 | Fleet is open source device management software. Prior to version 4.80.1, Fleet trusted cl | |
CVE-2026-24899 |
high | 8.2 | 0.0038 | 2026-10-29 | Fleet is open source device management software. Prior to version 4.82.0, a vulnerability | |
CVE-2026-26062 |
high | 8.7 | 0.0037 | 2026-10-29 | Fleet is open source device management software. Prior to version 4.81.0, Fleet contained | |
CVE-2026-26191 |
medium | 6.0 | 0.0077 | 2026-10-29 | Fleet is open source device management software. Prior to version 4.81.0, a vulnerability | |
CVE-2026-3290 |
high | 7.4 | 0.0016 | 2026-10-29 | Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predic | |
CVE-2026-43903 |
high | 8.4 | 0.0013 | 2026-10-29 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image f | |
CVE-2026-43904 |
high | 8.4 | 0.0017 | 2026-10-29 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image f | |
CVE-2026-43905 |
high | 7.1 | 0.0017 | 2026-10-29 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image f | |
CVE-2026-43906 |
high | 8.5 | 0.0019 | 2026-10-29 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image f | |
CVE-2026-43907 |
high | 8.3 | 0.0037 | 2026-10-29 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image f | |
CVE-2026-43908 |
high | 8.8 | 0.0037 | 2026-10-29 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image f | |
CVE-2026-43909 |
high | 8.8 | 0.0037 | 2026-10-29 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image f | |
CVE-2026-43996 |
medium | 5.5 | 0.0018 | 2026-10-29 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image f | |
CVE-2026-44636 |
high | 7.8 | 0.0010 | 2026-10-29 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1. | |
CVE-2026-44637 |
high | 7.1 | 0.0016 | 2026-10-29 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1. | |
CVE-2026-44638 |
low | 2.5 | 0.0013 | 2026-10-29 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1. | |
CVE-2026-46356 |
medium | 6.9 | 0.0028 | 2026-10-29 | Fleet is open source device management software. Prior to version 4.80.1, a vulnerability | |
CVE-2026-8509 |
high | 8.8 | 0.0040 | 2026-10-29 | Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote at | |
CVE-2026-8510 |
high | 7.5 | 0.0995 | 2026-10-29 | Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a rem | |
CVE-2026-8511 |
critical | 9.6 | 0.0023 | 2026-10-29 | Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to | |
CVE-2026-8512 |
high | 8.3 | 0.0025 | 2026-10-29 | Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote att | |
CVE-2026-8513 |
high | 8.3 | 0.0021 | 2026-10-29 | Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remo | |
CVE-2026-8514 |
high | 8.3 | 0.0021 | 2026-10-29 | Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker | |
CVE-2026-8515 |
high | 8.3 | 0.0021 | 2026-10-29 | Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker w | |
CVE-2026-8516 |
medium | 5.3 | 0.0022 | 2026-10-29 | Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0 |