Browse All CVEs
33,080 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-41565 |
high | 7.5 | 0.0047 | 2026-10-29 | CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decryp | |
CVE-2026-44358 |
high | 8.2 | 0.0018 | 2026-10-29 | Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espr | |
CVE-2026-44593 |
high | 8.7 | 0.0044 | 2026-10-29 | esm.sh is a no-build content delivery network (CDN) for web development. In 137 and earlie | |
CVE-2026-44594 |
high | 7.5 | 0.0039 | 2026-10-29 | esm.sh is a no-build content delivery network (CDN) for web development. In 137 and earlie | |
CVE-2026-45017 |
high | 8.2 | 0.0034 | 2026-10-29 | Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.0, the bui | |
CVE-2026-48522 |
medium | 4.2 | 0.0022 | 2026-10-29 | PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient passes it | |
CVE-2026-48523 |
medium | 5.4 | 0.0013 | 2026-10-29 | PyJWT is a JSON Web Token implementation in Python. From 2.9.0 to 2.12.1, there is a verif | |
CVE-2026-48524 |
low | 3.7 | 0.0040 | 2026-10-29 | PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient.get_signi | |
CVE-2026-48525 |
medium | 5.3 | 0.0037 | 2026-10-29 | PyJWT is a JSON Web Token implementation in Python. From 2.8.0 to 2.12.1, when verifying d | |
CVE-2026-48526 |
— | — | 0.0043 | 2026-10-29 | PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is | |
CVE-2026-24444 |
critical | 9.3 | 0.0053 | 2026-10-29 | SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9_B9 contain a har | |
CVE-2026-41184 |
medium | 6.0 | 0.0050 | 2026-10-29 | In Calico, the install-cni init container logs the rendered CNI configuration to standard | |
CVE-2026-44543 |
high | 8.7 | 0.0041 | 2026-10-29 | Local Path Provisioner provides a way for the Kubernetes users to utilize the local storag | |
CVE-2026-45076 |
medium | 5.1 | 0.0037 | 2026-10-29 | Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated | |
CVE-2026-45078 |
medium | 6.8 | 0.0013 | 2026-10-29 | Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, local authen | |
CVE-2026-45261 |
critical | 9.3 | 0.0052 | 2026-10-29 | GitButler is a modern Git-based version control interface for AI-powered workflows. Prior | |
CVE-2026-8697 |
high | 8.7 | 0.0051 | 2026-10-29 | Due to improper enforcement of authentication rate-limiting on a debug SSH service in Arch | |
CVE-2026-45021 |
medium | 5.1 | 0.0020 | 2026-10-29 | Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernet | |
CVE-2026-45307 |
medium | 6.1 | 0.0018 | 2026-10-29 | Speakr is a personal, self-hosted web application designed for transcribing audio recordin | |
CVE-2026-45310 |
high | 7.4 | 0.0028 | 2026-10-29 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.22, the fetch_url to | |
CVE-2026-45311 |
critical | 9.6 | 0.0057 | 2026-10-29 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. From 0.3.0 to 0.8.23, the run_tes | |
CVE-2026-45323 |
critical | 9.6 | 0.0032 | 2026-10-29 | MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore | |
CVE-2026-45373 |
high | 7.4 | 0.0030 | 2026-10-29 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is | |
CVE-2026-45374 |
critical | 9.6 | 0.0039 | 2026-10-29 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, the task_create | |
CVE-2026-42998 |
high | 8.8 | 0.0030 | 2026-10-29 | An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application cred | |
CVE-2026-42999 |
high | 8.8 | 0.0033 | 2026-10-29 | An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBAC policy enfo | |
CVE-2026-43000 |
high | 8.8 | 0.0033 | 2026-10-29 | An issue was discovered in OpenStack Keystone before 29.0.2. When combined with an applica | |
CVE-2026-43979 |
medium | 5.0 | 0.0033 | 2026-10-29 | Local Deep Research is an AI-powered research assistant for deep, iterative research. Prio | |
CVE-2026-44394 |
high | 8.1 | 0.0025 | 2026-10-29 | An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token | |
CVE-2026-45332 |
high | 7.5 | 0.0142 | 2026-10-29 | Automad is a flat-file content management system and template engine. From 2.0.0-alpha.1 t | |
CVE-2026-46509 |
high | 8.2 | 0.0032 | 2026-10-29 | deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype po | |
CVE-2026-46526 |
medium | 5.0 | 0.0030 | 2026-10-29 | Local Deep Research is an AI-powered research assistant for deep, iterative research. Prio | |
CVE-2026-47326 |
medium | 5.5 | 0.0009 | 2026-10-29 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of | |
CVE-2026-47327 |
low | 3.3 | 0.0009 | 2026-10-29 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer derefere | |
CVE-2026-47328 |
medium | 6.1 | 0.0009 | 2026-10-29 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to | |
CVE-2026-47329 |
low | 3.3 | 0.0009 | 2026-10-29 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes | |
CVE-2026-47330 |
low | 3.3 | 0.0009 | 2026-10-29 | Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain cir | |
CVE-2026-47331 |
high | 7.8 | 0.0011 | 2026-10-29 | Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifyi | |
CVE-2026-47332 |
medium | 5.5 | 0.0011 | 2026-10-29 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate t | |
CVE-2026-47333 |
high | 7.8 | 0.0011 | 2026-10-29 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorr | |
CVE-2026-47334 |
medium | 5.5 | 0.0008 | 2026-10-29 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep whil | |
CVE-2026-32847 |
high | 8.7 | 0.0038 | 2026-10-29 | DeepCode through commit c991dc2 contains a path traversal vulnerability in the SPA catch-a | |
CVE-2026-33590 |
high | 8.5 | 0.0045 | 2026-10-29 | Insecure default settings of Portainer CE grant regular (non-admin) users privileges that | |
CVE-2026-49127 |
high | 8.8 | 0.0051 | 2026-10-29 | Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerab | |
CVE-2026-49128 |
high | 8.7 | 0.0064 | 2026-10-29 | Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability i | |
CVE-2026-49129 |
medium | 6.9 | 0.0028 | 2026-10-29 | Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vu | |
CVE-2026-49130 |
medium | 6.9 | 0.0026 | 2026-10-29 | Music Player Daemon (MPD) before version 0.24.11 contains a CRLF injection vulnerability i | |
CVE-2026-9037 |
critical | 9.3 | 0.0025 | 2026-10-29 | A firmware update mechanism in the affected charging controller fails to validate the auth | |
CVE-2026-9038 |
high | 8.6 | 0.0023 | 2026-10-29 | A stack-based buffer overflow vulnerability in the charging controller’s signal-processing | |
CVE-2026-9039 |
high | 8.6 | 0.0020 | 2026-10-29 | A configuration weakness in the device’s remote management service allows an authenticated |