Browse All CVEs
33,067 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-46497 |
low | 2.3 | 0.0029 | 2026-10-29 | Crawlee is a web scraping and browser automation library. From version 1.0.0 to before ver | |
CVE-2026-46558 |
high | 8.3 | 0.0029 | 2026-10-29 | Plane is an open-source project management tool. Prior to version 1.3.1, there is a cross- | |
CVE-2026-48855 |
low | 2.3 | 0.0030 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh | |
CVE-2026-48856 |
high | 7.1 | 0.0034 | 2026-10-29 | Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows R | |
CVE-2026-48858 |
medium | 6.3 | 0.0023 | 2026-10-29 | Server-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) a | |
CVE-2026-48859 |
medium | 6.3 | 0.0035 | 2026-10-29 | Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modul | |
CVE-2026-48860 |
high | 7.5 | 0.0021 | 2026-10-29 | Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl (inet_tls_dist m | |
CVE-2026-49759 |
high | 8.8 | 0.0050 | 2026-10-29 | Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthen | |
CVE-2026-49760 |
medium | 6.9 | 0.0014 | 2026-10-29 | Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based | |
CVE-2026-53693 |
medium | 6.9 | 0.0028 | 2026-10-29 | A stored cross-site scripting vulnerability existed in MISP BSimVis tag rendering code. Se | |
CVE-2026-46609 |
medium | 4.6 | 0.0014 | 2026-10-29 | Umbraco is an ASP.NET CMS. From version 14.0.0 to before version 17.4.0, authenticated use | |
CVE-2026-46616 |
medium | 6.1 | 0.0018 | 2026-10-29 | Umbraco is an ASP.NET CMS. Prior to versions 13.14.0 and 17.4.0, some of the Surface Contr | |
CVE-2026-11417 |
high | 7.0 | 0.0099 | 2026-10-29 | OS command injection in the NodejsFunction local bundling pipeline in aws-cdk-lib before 2 | |
CVE-2026-11596 |
medium | 4.7 | 0.0024 | 2026-10-29 | In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation f | |
CVE-2026-20260 |
medium | 4.3 | 0.0020 | 2026-10-29 | In Splunk SOAR (Security Orchestration, Automation, and Response) versions below 8.5.0, an | |
CVE-2026-45062 |
high | 8.1 | 0.0071 | 2026-10-29 | FrankenPHP is a modern application server for PHP. From version 1.11.2 to before version 1 | |
CVE-2026-46642 |
medium | 6.1 | 0.0022 | 2026-10-29 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7 | |
CVE-2026-10740 |
medium | 6.9 | 0.0029 | 2026-10-29 | Unbounded memory allocation in the CRYPTO frame reassembler in s2n-quic before 1.8.2 may a | |
CVE-2026-11626 |
medium | 5.4 | 0.0011 | 2026-10-29 | CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privile | |
CVE-2026-50637 |
high | 8.2 | 0.0032 | 2026-10-29 | Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metri | |
CVE-2026-50638 |
critical | 9.1 | 0.0034 | 2026-10-29 | Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against me | |
CVE-2026-50639 |
medium | 6.5 | 0.0026 | 2026-10-29 | Metrics::Any::Adapter::SignalFx versions before 0.04 for Perl does not protect against met | |
CVE-2026-45106 |
medium | 4.6 | 0.0021 | 2026-10-29 | Weblate is a web based localization tool. Prior to version 2026.5, Weblate's live search p | |
CVE-2026-46529 |
high | 8.4 | 0.0053 | 2026-10-29 | Atril Document Viewer is the default document reader of the MATE desktop environment for L | |
CVE-2026-46643 |
high | 7.5 | 0.0020 | 2026-10-29 | Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a htm | |
CVE-2026-46683 |
medium | 6.9 | 0.0025 | 2026-10-29 | Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a htm | |
CVE-2026-50127 |
medium | 5.9 | 0.0031 | 2026-10-29 | Weblate is a web based localization tool. From version 5.15 to before version 2026.6, Webl | |
CVE-2026-6893 |
high | 7.5 | 0.0127 | 2026-10-29 | A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vul | |
CVE-2026-5497 |
high | 7.5 | 0.0054 | 2026-10-29 | vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service ( | |
CVE-2026-4764 |
critical | 9.4 | 0.0021 | 2026-10-29 | A Missing Authorization vulnerability in the playbook import functionality in Dialogflow C | |
CVE-2026-53423 |
medium | 5.9 | 0.0026 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in membraneframework me | |
CVE-2026-8464 |
high | 8.3 | 0.0020 | 2026-10-29 | Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability | |
CVE-2026-11561 |
critical | 9.8 | 0.0045 | 2026-10-29 | Improper neutralization of special elements used in an expression language statement ('exp | |
CVE-2026-11956 |
medium | 6.3 | 0.0019 | 2026-10-29 | A vulnerability was determined in TwiN gatus 5.36.0. Impacted is the function setSessionCo | |
CVE-2026-48998 |
medium | 5.3 | 0.0020 | 2026-10-29 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2 | |
CVE-2026-49214 |
medium | 5.3 | 0.0019 | 2026-10-29 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2 | |
CVE-2026-7852 |
critical | 9.8 | 0.0036 | 2026-10-29 | Unrestricted upload of file with dangerous type vulnerability in Limatek System Inc. LimRA | |
CVE-2026-10847 |
high | 7.8 | 0.0012 | 2026-10-29 | A local privilege escalation vulnerability exists in Check Point Identity Agent Full for W | |
CVE-2026-11816 |
high | 8.1 | 0.0056 | 2026-10-29 | Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive ext | |
CVE-2026-53661 |
high | 8.8 | 0.0026 | 2026-10-29 | Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Co | |
CVE-2026-53723 |
medium | 5.8 | 0.0022 | 2026-10-29 | Guzzle Services provides an implementation of the Guzzle Command library that uses Guzzle | |
CVE-2026-6338 |
medium | 4.9 | 0.0029 | 2026-10-29 | A HTTP request smuggling and desynchronization vulnerability affects Kong Gateway Enterpri | |
CVE-2026-8406 |
high | 7.1 | 0.0030 | 2026-10-29 | openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the mess | |
CVE-2026-11839 |
critical | 9.9 | 0.0034 | 2026-10-29 | Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Tec | |
CVE-2026-3341 |
medium | 5.4 | 0.0014 | 2026-10-29 | IBM Langflow Desktop 1.0.0 through 1.9.2 IBM Langflow is vulnerable to server-side request | |
CVE-2026-4096 |
medium | 6.1 | 0.0015 | 2026-10-29 | IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by impr | |
CVE-2026-53777 |
high | 8.6 | 0.0047 | 2026-10-29 | Perry before 0.5.1159 contains a path traversal vulnerability that allows a malicious buil | |
CVE-2026-7787 |
high | 8.1 | 0.0025 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify s | |
CVE-2026-7870 |
high | 8.8 | 0.0034 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqu | |
CVE-2026-9648 |
critical | 9.1 | 0.0022 | 2026-10-29 | The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowi |