Browse All CVEs
32,067 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-33999 |
— | — | 0.0038 | 2026-10-29 | A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically | |
CVE-2026-34001 |
— | — | 0.0026 | 2026-10-29 | A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XS | |
CVE-2026-34003 |
— | — | 0.0025 | 2026-10-29 | A flaw was found in the X.Org X server's XKB key types request validation. A local attacke | |
CVE-2026-41238 |
medium | 6.9 | 0.0027 | 2026-10-29 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions | |
CVE-2026-41239 |
medium | 6.8 | 0.0025 | 2026-10-29 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Starting | |
CVE-2026-41240 |
medium | 6.0 | 0.0031 | 2026-10-29 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions | |
CVE-2026-40182 |
medium | 5.9 | 0.0030 | 2026-10-29 | OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When e | |
CVE-2026-40891 |
medium | 5.3 | 0.0019 | 2026-10-29 | OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When e | |
CVE-2026-5039 |
medium | 6.1 | 0.0013 | 2026-10-29 | TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptogr | |
CVE-2026-6919 |
critical | 9.6 | 0.0029 | 2026-10-29 | Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attac | |
CVE-2026-6920 |
critical | 9.6 | 0.0021 | 2026-10-29 | Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a re | |
CVE-2026-6921 |
high | 8.3 | 0.0019 | 2026-10-29 | Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker | |
CVE-2026-33694 |
high | 7.4 | 0.0015 | 2026-10-29 | This vulnerability allows an attacker to create a junction, enabling the deletion of arbit | |
CVE-2026-40886 |
— | — | 0.0038 | 2026-10-29 | Argo Workflows is an open source container-native workflow engine for orchestrating parall | |
CVE-2026-40894 |
medium | 5.3 | 0.0046 | 2026-10-29 | OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to | |
CVE-2026-41078 |
medium | 5.9 | 0.0022 | 2026-10-29 | OpenTelemetry dotnet is a dotnet telemetry framework. In 1.6.0-rc.1 and earlier, OpenTelem | |
CVE-2026-41173 |
medium | 5.9 | 0.0030 | 2026-10-29 | The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurati | |
CVE-2026-41205 |
high | 7.7 | 0.0036 | 2026-10-29 | Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template | |
CVE-2026-41213 |
medium | 5.9 | 0.0026 | 2026-10-29 | @node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The to | |
CVE-2026-41246 |
— | — | 0.0049 | 2026-10-29 | Contour is a Kubernetes ingress controller using Envoy proxy. From v1.19.0 to before v1.33 | |
CVE-2026-41247 |
high | 8.9 | 0.0157 | 2026-10-29 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Pr | |
CVE-2026-6074 |
critical | 9.3 | 0.0055 | 2026-10-29 | Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerabili | |
CVE-2026-25874 |
critical | 9.3 | 0.1555 | 2026-10-29 | LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async infere | |
CVE-2026-41137 |
critical | 9.4 | 0.0145 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41138 |
high | 8.8 | 0.0060 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41264 |
critical | 9.2 | 0.0179 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41265 |
critical | 9.2 | 0.0057 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41266 |
high | 7.7 | 0.0406 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41267 |
critical | 9.8 | 0.0033 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41268 |
critical | 9.8 | 0.1744 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41269 |
high | 8.8 | 0.0047 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41270 |
high | 8.3 | 0.0023 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41271 |
high | 8.3 | 0.0023 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41272 |
high | 7.1 | 0.0026 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41273 |
high | 7.7 | 0.0031 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41275 |
high | 7.5 | 0.0018 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41276 |
high | 7.7 | 0.0687 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41277 |
high | 7.6 | 0.0311 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41278 |
high | 8.7 | 0.0042 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41279 |
high | 8.2 | 0.0026 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-28525 |
high | 8.2 | 0.0032 | 2026-10-29 | SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mon | |
CVE-2026-6375 |
high | 8.7 | 0.0031 | 2026-10-29 | A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger | |
CVE-2026-6376 |
high | 8.7 | 0.0050 | 2026-10-29 | A weakness in SpiceJet’s public booking retrieval page permits full passenger booking deta | |
CVE-2026-6940 |
medium | 6.9 | 0.0022 | 2026-10-29 | radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that al | |
CVE-2026-6941 |
medium | 6.9 | 0.0022 | 2026-10-29 | radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handli | |
CVE-2026-6942 |
critical | 9.3 | 0.0192 | 2026-10-29 | radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that | |
CVE-2026-24303 |
critical | 9.6 | 0.0039 | 2026-10-29 | Improper certificate validation in Microsoft Partner Center allows an unauthorized attacke | |
CVE-2026-26150 |
critical | 10.0 | 0.0057 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to | |
CVE-2026-26210 |
critical | 9.3 | 0.0070 | 2026-10-29 | KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balanc | |
CVE-2026-2708 |
medium | 5.3 | 0.0032 | 2026-10-29 | A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The sou |