Browse All CVEs
33,082 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42790 |
high | 7.6 | 0.0034 | 2026-10-29 | Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and pu | |
CVE-2026-44473 |
high | 7.1 | 0.0017 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Prior to 1.10.0, a radio with a vali | |
CVE-2026-44474 |
low | 3.7 | 0.0013 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core didn't en | |
CVE-2026-44475 |
medium | 6.1 | 0.0015 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core does not | |
CVE-2026-44483 |
high | 8.2 | 0.0036 | 2026-10-29 | RVF (formerly Remix Validated Form) provides easy form validation and state management for | |
CVE-2026-45027 |
medium | 5.9 | 0.0017 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a use | |
CVE-2026-45335 |
medium | 5.4 | 0.0018 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to 3.7.3, an Open Redirect vulne | |
CVE-2026-49054 |
medium | 4.3 | 0.0021 | 2026-10-29 | Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Inco | |
CVE-2025-67903 |
medium | 5.3 | 0.0018 | 2026-10-29 | Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification b | |
CVE-2025-69600 |
high | 7.8 | 0.0083 | 2026-10-29 | Command injection in Raynet rvia RayVentory Scan Engine 12.6 Update 8 and previous version | |
CVE-2026-42328 |
medium | 6.2 | 0.0012 | 2026-10-29 | go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interface | |
CVE-2026-42553 |
high | 7.1 | 0.0030 | 2026-10-29 | Cinny is a Matrix client. Prior to 4.10.3, A remote authenticated attacker who shares a ro | |
CVE-2026-44378 |
medium | 6.9 | 0.0032 | 2026-10-29 | Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite lengt | |
CVE-2026-44460 |
high | 7.4 | 0.0033 | 2026-10-29 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batc | |
CVE-2026-44521 |
high | 8.8 | 0.0024 | 2026-10-29 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Pr | |
CVE-2026-45047 |
high | 7.5 | 0.0044 | 2026-10-29 | bird-lg-go is a BIRD looking glass in Go. Prior to 1.4.5, the apiHandler (and similarly we | |
CVE-2026-45081 |
medium | 6.5 | 0.0020 | 2026-10-29 | Frappe HR is an open-source human resources management solution (HRMS). Prior to 16.5.0, a | |
CVE-2026-45087 |
critical | 10.0 | 0.0873 | 2026-10-29 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2 | |
CVE-2026-45088 |
high | 7.5 | 0.0031 | 2026-10-29 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2 | |
CVE-2026-45089 |
high | 8.2 | 0.0024 | 2026-10-29 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2 | |
CVE-2026-45090 |
high | 7.5 | 0.0027 | 2026-10-29 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2 | |
CVE-2026-5509 |
high | 8.5 | 0.0246 | 2026-10-29 | An authenticated command injection vulnerability exists in the Archer BE450 v1 and BE7200 | |
CVE-2026-42878 |
medium | 5.3 | 0.0090 | 2026-10-29 | FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an una | |
CVE-2026-42879 |
medium | 6.3 | 0.0023 | 2026-10-29 | FacturaScripts is an open source accounting and invoicing software. In 2025.81 and earlier | |
CVE-2026-44635 |
high | 7.5 | 0.0036 | 2026-10-29 | Kysely is a type-safe TypeScript SQL query builder. From 0.26.0 to 0.28.16, DefaultQueryCo | |
CVE-2026-45046 |
medium | 5.5 | 0.0011 | 2026-10-29 | Gryph provides a security layer for AI coding agents. Prior to 0.7.0, Gryph implements log | |
CVE-2026-42197 |
high | 8.7 | 0.0031 | 2026-10-29 | RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd7 | |
CVE-2026-42877 |
medium | 5.4 | 0.0019 | 2026-10-29 | FacturaScripts is an open source accounting and invoicing software. In 2025.92 and earlier | |
CVE-2026-44590 |
critical | 9.3 | 0.0114 | 2026-10-29 | Sherlock hunts down social media accounts by username across social networks. Prior to 0.1 | |
CVE-2026-44724 |
— | — | 0.0092 | 2026-10-29 | systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31. | |
CVE-2026-44886 |
high | 8.7 | 0.0033 | 2026-10-29 | Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. From 2024-06-29 to | |
CVE-2026-44887 |
critical | 9.8 | 0.0054 | 2026-10-29 | Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-0 | |
CVE-2026-44888 |
critical | 9.8 | 0.0039 | 2026-10-29 | Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-0 | |
CVE-2026-45108 |
high | 8.4 | 0.0025 | 2026-10-29 | Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 2.0. | |
CVE-2026-45134 |
high | 7.1 | 0.0020 | 2026-10-29 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to | |
CVE-2026-47161 |
high | 8.7 | 0.0064 | 2026-10-29 | RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf | |
CVE-2026-47271 |
medium | 5.1 | 0.0012 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-47272 |
high | 7.1 | 0.0012 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-47273 |
medium | 6.5 | 0.0027 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-47274 |
medium | 6.3 | 0.0014 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-48064 |
high | 8.1 | 0.0034 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-48065 |
medium | 6.7 | 0.0015 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-48066 |
medium | 5.7 | 0.0012 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-48792 |
medium | 4.4 | 0.0013 | 2026-10-29 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior t | |
CVE-2026-8359 |
high | 7.5 | 0.0034 | 2026-10-29 | When processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatus | |
CVE-2026-8360 |
high | 7.5 | 0.0034 | 2026-10-29 | Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DLLs (i.e., | |
CVE-2026-8361 |
high | 7.5 | 0.0043 | 2026-10-29 | A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL pa | |
CVE-2026-8362 |
critical | 9.8 | 0.0039 | 2026-10-29 | A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing | |
CVE-2026-8363 |
critical | 9.8 | 0.0040 | 2026-10-29 | A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing | |
CVE-2026-8364 |
critical | 9.8 | 0.0038 | 2026-10-29 | Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on |