Browse All CVEs
33,170 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-8654 |
high | 8.7 | 0.0023 | 2026-10-29 | Improper input validation in Delphix Continuous Data connectors allows an authenticated us | |
CVE-2026-44088 |
high | 8.6 | 0.0044 | 2026-10-29 | SzafirHost verifies the signature of the downloaded JAR file using class JarInputStream (r | |
CVE-2026-8398 |
critical | 9.3 | 0.0146 | 2026-10-29 | KEV | Daemon Tools contains an unspecified vulnerability that has a high impact on confidentiali |
CVE-2026-41960 |
medium | 5.8 | 0.0009 | 2026-10-29 | Permission control vulnerability in calls. Impact: Successful exploitation of this vulnera | |
CVE-2026-41961 |
medium | 5.9 | 0.0008 | 2026-10-29 | Permission control vulnerability in contacts. Impact: Successful exploitation of this vuln | |
CVE-2026-41962 |
low | 3.6 | 0.0008 | 2026-10-29 | Permission control vulnerability in the app management and control module. Impact: Success | |
CVE-2026-41963 |
low | 2.8 | 0.0008 | 2026-10-29 | Stack overflow vulnerability in the media platform. Impact: Successful exploitation of thi | |
CVE-2026-41964 |
high | 8.4 | 0.0008 | 2026-10-29 | Permission control vulnerability in the web. Impact: Successful exploitation of this vulne | |
CVE-2026-41965 |
medium | 5.6 | 0.0013 | 2026-10-29 | Use-After-Free (UAF) vulnerability in the web. Impact: Successful exploitation of this vul | |
CVE-2026-41966 |
medium | 5.6 | 0.0011 | 2026-10-29 | Permission control vulnerability in the smart sensing service. Impact: Successful exploita | |
CVE-2026-41967 |
medium | 5.9 | 0.0008 | 2026-10-29 | Permission control vulnerability in the manufacturability design module. Impact: Successfu | |
CVE-2026-41968 |
medium | 5.9 | 0.0008 | 2026-10-29 | Permission control vulnerability in the manufacturability design module. Impact: Successfu | |
CVE-2026-41969 |
medium | 6.2 | 0.0010 | 2026-10-29 | Permission control vulnerability in the projection module. Impact: Successful exploitation | |
CVE-2026-41970 |
medium | 6.8 | 0.0013 | 2026-10-29 | Out-of-bounds write vulnerability in the distributed file system module. Impact: Successfu | |
CVE-2026-41971 |
medium | 5.5 | 0.0008 | 2026-10-29 | Permission control vulnerability in the security control module. Impact: Successful exploi | |
CVE-2026-8454 |
medium | 5.3 | 0.0019 | 2026-10-29 | Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write o | |
CVE-2026-8503 |
medium | 6.5 | 0.0024 | 2026-10-29 | Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session | |
CVE-2026-41552 |
critical | 9.2 | 0.0050 | 2026-10-29 | PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Trav | |
CVE-2026-41553 |
critical | 10.0 | 0.0065 | 2026-10-29 | PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Co | |
CVE-2026-7182 |
critical | 9.2 | 0.0040 | 2026-10-29 | Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HT | |
CVE-2025-67437 |
medium | 6.5 | 0.0022 | 2026-10-29 | Medical Management System a81df1ce700a9662cb136b27af47f4cbde64156b is vulnerable to Insecu | |
CVE-2026-45736 |
high | 7.5 | 0.0075 | 2026-10-29 | ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websock | |
CVE-2026-8669 |
medium | 6.5 | 0.0032 | 2026-10-29 | Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted m | |
CVE-2026-2031 |
critical | 10.0 | 0.0053 | 2026-10-29 | An Improper Access Control vulnerability in several internal API endpoints for Google Clou | |
CVE-2026-35194 |
high | 8.1 | 0.0038 | 2026-10-29 | Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 thro | |
CVE-2026-45772 |
none | — | 0.0039 | 2026-10-29 | Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From | |
CVE-2026-45773 |
medium | 5.1 | 0.0012 | 2026-10-29 | Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prio | |
CVE-2026-46508 |
high | 8.4 | 0.0016 | 2026-10-29 | Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prio | |
CVE-2026-41258 |
critical | 9.1 | 0.0032 | 2026-10-29 | OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before | |
CVE-2026-42155 |
critical | 9.3 | 0.0037 | 2026-10-29 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alt | |
CVE-2026-42207 |
medium | 6.1 | 0.0018 | 2026-10-29 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alt | |
CVE-2026-42458 |
medium | 5.3 | 0.0032 | 2026-10-29 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alt | |
CVE-2026-44309 |
medium | 5.3 | 0.0014 | 2026-10-29 | Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC id | |
CVE-2026-44310 |
medium | 5.4 | 0.0011 | 2026-10-29 | Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC id | |
CVE-2026-44641 |
high | 7.1 | 0.0043 | 2026-10-29 | Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior | |
CVE-2026-44699 |
critical | 9.1 | 0.0026 | 2026-10-29 | LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that | |
CVE-2026-44717 |
critical | 9.8 | 0.0048 | 2026-10-29 | MCP Calculate Server is a mathematical calculation service based on MCP protocol and SymPy | |
CVE-2026-45035 |
critical | 9.4 | 0.0038 | 2026-10-29 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, Ta | |
CVE-2026-45036 |
high | 7.0 | 0.0013 | 2026-10-29 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, Ta | |
CVE-2026-45037 |
high | 7.1 | 0.0014 | 2026-10-29 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.232, Ta | |
CVE-2026-45038 |
high | 8.4 | 0.0018 | 2026-10-29 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, si | |
CVE-2026-45539 |
high | 7.4 | 0.0065 | 2026-10-29 | Microsoft APM is an open-source, community-driven dependency manager for AI agents. From 0 | |
CVE-2026-46383 |
medium | 5.5 | 0.0045 | 2026-10-29 | Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior | |
CVE-2026-46474 |
high | 7.5 | 0.0032 | 2026-10-29 | Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were gener | |
CVE-2026-44366 |
medium | 6.1 | 0.0028 | 2026-10-29 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-44826 |
high | 7.5 | 0.0026 | 2026-10-29 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-45007 |
medium | 5.3 | 0.0026 | 2026-10-29 | phpMyFAQ before 4.1.2 contains missing permission checks in ConfigurationTabController.php | |
CVE-2026-45008 |
high | 7.0 | 0.0027 | 2026-10-29 | phpMyFAQ before 4.1.2 contains a path traversal vulnerability in Client::deleteClientFolde | |
CVE-2026-45009 |
medium | 5.3 | 0.0021 | 2026-10-29 | phpMyFAQ before 4.1.2 contains an insufficient authorization vulnerability in admin-api ro | |
CVE-2026-45010 |
critical | 9.3 | 0.0043 | 2026-10-29 | phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempt |