Browse All CVEs
33,065 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-49982 |
high | 8.2 | 0.0050 | 2026-10-29 | tmp is a temporary file and directory creator for node.js. In version 0.2.6, the _assertPa | |
CVE-2026-3329 |
high | 8.7 | 0.0045 | 2026-10-29 | A remote unauthenticated attacker may be able to conduct credential-guessing attacks again | |
CVE-2026-47157 |
medium | 6.5 | 0.0019 | 2026-10-29 | aiograpi is an asynchronous Instagram API for Python. aiograpi versions before 0.9.10 acce | |
CVE-2026-48546 |
high | 8.5 | 0.0049 | 2026-10-29 | KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to | |
CVE-2026-49261 |
critical | 9.8 | 0.0158 | 2026-10-29 | MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6 | |
CVE-2026-45176 |
high | 8.9 | 0.0012 | 2026-10-29 | Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access cont | |
CVE-2026-45177 |
critical | 9.1 | 0.0050 | 2026-10-29 | Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control with | |
CVE-2026-45178 |
high | 8.4 | 0.0036 | 2026-10-29 | Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access contro | |
CVE-2026-46519 |
high | 8.8 | 0.0051 | 2026-10-29 | mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management | |
CVE-2026-47163 |
high | 7.2 | 0.0027 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47169 |
high | 7.5 | 0.0030 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47170 |
high | 7.7 | 0.0021 | 2026-10-29 | Garlic-Hub manages digital signage network — devices, content, and playlists — from a sing | |
CVE-2026-47171 |
high | 8.8 | 0.0041 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47172 |
critical | 9.5 | 0.0041 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47173 |
medium | 6.3 | 0.0033 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47174 |
critical | 9.5 | 0.0039 | 2026-10-29 | In Duck Site before version 1.0.1, the repository has a deploy workflow that runs after th | |
CVE-2026-47175 |
low | 2.3 | 0.0030 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47176 |
medium | 5.7 | 0.0032 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47177 |
medium | 5.7 | 0.0032 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47181 |
high | 8.7 | 0.0031 | 2026-10-29 | PenguinMod-BackendApi is the backend api for penguinmod. Prior to version 1.0.0, a NoSQL i | |
CVE-2026-47188 |
low | 2.3 | 0.0030 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47189 |
high | 8.3 | 0.0039 | 2026-10-29 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. | |
CVE-2026-47250 |
medium | 6.1 | 0.0042 | 2026-10-29 | mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management | |
CVE-2026-45175 |
high | 8.5 | 0.0013 | 2026-10-29 | Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access cont | |
CVE-2026-45802 |
medium | 6.0 | 0.0026 | 2026-10-29 | FPDI is a collection of PHP classes that facilitate reading pages from existing PDF docume | |
CVE-2026-49949 |
medium | 6.0 | 0.0025 | 2026-10-29 | CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network- | |
CVE-2026-49973 |
critical | 9.2 | 0.0054 | 2026-10-29 | Hermes WebUI before version 0.51.358 contains an improper access control vulnerability tha | |
CVE-2026-53781 |
medium | 5.3 | 0.0032 | 2026-10-29 | Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote at | |
CVE-2026-53782 |
medium | 6.3 | 0.0026 | 2026-10-29 | Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows a | |
CVE-2026-12007 |
high | 8.8 | 0.0029 | 2026-10-29 | Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remot | |
CVE-2026-12008 |
high | 8.3 | 0.0025 | 2026-10-29 | Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a re | |
CVE-2026-12009 |
high | 8.3 | 0.0025 | 2026-10-29 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior | |
CVE-2026-12010 |
high | 8.3 | 0.0026 | 2026-10-29 | Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a | |
CVE-2026-12011 |
high | 8.3 | 0.0025 | 2026-10-29 | Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a re | |
CVE-2026-12012 |
high | 8.1 | 0.0022 | 2026-10-29 | Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in | |
CVE-2026-12014 |
high | 8.3 | 0.0017 | 2026-10-29 | Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the | |
CVE-2026-12015 |
medium | 5.3 | 0.0023 | 2026-10-29 | Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attac | |
CVE-2026-12016 |
high | 8.3 | 0.0023 | 2026-10-29 | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed | |
CVE-2026-12017 |
low | 3.1 | 0.0021 | 2026-10-29 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowe | |
CVE-2026-12018 |
high | 8.8 | 0.0016 | 2026-10-29 | Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 a | |
CVE-2026-12019 |
high | 8.3 | 0.0025 | 2026-10-29 | Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827. | |
CVE-2026-12020 |
high | 8.8 | 0.0022 | 2026-10-29 | Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remot | |
CVE-2026-12022 |
high | 8.3 | 0.0017 | 2026-10-29 | Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote att | |
CVE-2026-12023 |
high | 8.3 | 0.0023 | 2026-10-29 | Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote att | |
CVE-2026-12024 |
medium | 6.5 | 0.0016 | 2026-10-29 | Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allow | |
CVE-2026-12025 |
medium | 5.3 | 0.0023 | 2026-10-29 | Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827 | |
CVE-2026-12026 |
medium | 6.5 | 0.0024 | 2026-10-29 | Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a | |
CVE-2026-12027 |
critical | 9.6 | 0.0022 | 2026-10-29 | Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed | |
CVE-2026-12028 |
high | 8.3 | 0.0023 | 2026-10-29 | Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote | |
CVE-2026-12029 |
high | 8.3 | 0.0019 | 2026-10-29 | Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remo |