Browse All CVEs
32,009 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42095 |
medium | 4.0 | 0.0016 | 2026-10-29 | bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket conn | |
CVE-2026-30368 |
medium | 5.4 | 0.0035 | 2026-10-29 | A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows | |
CVE-2026-39920 |
critical | 9.3 | 0.0054 | 2026-10-29 | BridgeHead FileStore versions prior to 24A (released in early 2024) expose the Apache Axis | |
CVE-2026-40897 |
— | — | 0.0055 | 2026-10-29 | Math.js is an extensive math library for JavaScript and Node.js. From 13.1.1 to before 15. | |
CVE-2026-41067 |
medium | 6.1 | 0.0019 | 2026-10-29 | Astro is a web framework. Prior to 6.1.6, the defineScriptVars function in Astro's server- | |
CVE-2026-41079 |
medium | 5.4 | 0.0041 | 2026-10-29 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operatin | |
CVE-2026-6911 |
critical | 9.3 | 0.0025 | 2026-10-29 | Missing JWT signature verification in AWS Ops Wheel allows unauthenticated attackers to fo | |
CVE-2026-6912 |
high | 8.7 | 0.0055 | 2026-10-29 | Improperly controlled modification of dynamically-determined object attributes in the Cogn | |
CVE-2026-41140 |
low | 0.6 | 0.0029 | 2026-10-29 | Poetry is a dependency manager for Python. Prior to 2.3.4, the extractall() function in sr | |
CVE-2026-41321 |
low | 2.2 | 0.0024 | 2026-10-29 | @astrojs/cloudflare is an SSR adapter for use with Cloudflare Workers targets. Prior to 13 | |
CVE-2026-41322 |
medium | 5.3 | 0.0029 | 2026-10-29 | @astrojs/node allows Astro to deploy your SSR site to Node targets. Prior to 10.0.5, reque | |
CVE-2026-41680 |
high | 8.7 | 0.0034 | 2026-10-29 | Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Denial of Serv | |
CVE-2026-33524 |
high | 7.5 | 0.0032 | 2026-10-29 | Zserio is a framework for serializing structured data with a compact and efficient way wit | |
CVE-2026-33662 |
high | 7.5 | 0.0040 | 2026-10-29 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linu | |
CVE-2026-33666 |
high | 7.5 | 0.0033 | 2026-10-29 | Zserio is a framework for serializing structured data with a compact and efficient way wit | |
CVE-2026-41414 |
high | 7.4 | 0.0028 | 2026-10-29 | Skim is a fuzzy finder designed to through files, lines, and commands. The generate-files | |
CVE-2026-41415 |
medium | 6.7 | 0.0031 | 2026-10-29 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and | |
CVE-2026-41416 |
high | 8.1 | 0.0028 | 2026-10-29 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and | |
CVE-2026-41418 |
medium | 5.3 | 0.0020 | 2026-10-29 | 4ga Boards is a boards system for realtime project management. Prior to 3.3.5, 4ga Boards | |
CVE-2026-41419 |
high | 7.6 | 0.0031 | 2026-10-29 | 4ga Boards is a boards system for realtime project management. Prior to 3.3.5, a path trav | |
CVE-2026-41492 |
critical | 9.8 | 0.0308 | 2026-10-29 | Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, Dgraphl exposes th | |
CVE-2026-41907 |
high | 8.1 | 0.0035 | 2026-10-29 | uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and | |
CVE-2026-41244 |
medium | 4.7 | 0.0011 | 2026-10-29 | Mojic is a CLI tool to transform readable C code into an unrecognizable chaotic stream of | |
CVE-2026-41427 |
high | 7.1 | 0.0021 | 2026-10-29 | Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.5, | |
CVE-2026-41429 |
high | 8.8 | 0.0031 | 2026-10-29 | arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and | |
CVE-2026-41433 |
high | 8.4 | 0.0019 | 2026-10-29 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetr | |
CVE-2026-6966 |
high | 7.0 | 0.0028 | 2026-10-29 | Improper verification of cryptographic signature uniqueness in delegated role validation i | |
CVE-2026-6967 |
high | 7.1 | 0.0025 | 2026-10-29 | Missing expiration, hash, and length enforcement in delegated metadata validation in awsla | |
CVE-2026-6968 |
high | 7.1 | 0.0053 | 2026-10-29 | Incomplete path traversal fixes in awslabs/tough before tough-v0.22.0 allow remote authent | |
CVE-2026-41248 |
critical | 9.1 | 0.0032 | 2026-10-29 | Clerk JavaScript is the official JavaScript repository for Clerk authentication. createRou | |
CVE-2026-41472 |
medium | 5.3 | 0.0052 | 2026-10-29 | CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in | |
CVE-2026-41473 |
high | 8.8 | 0.0079 | 2026-10-29 | CyberPanel versions prior to 2.4.5 contain an authentication bypass vulnerability in the A | |
CVE-2026-41481 |
— | — | 0.0026 | 2026-10-29 | LangChain is a framework for building agents and LLM-powered applications. Prior to langch | |
CVE-2026-41488 |
low | 3.1 | 0.0016 | 2026-10-29 | LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14 | |
CVE-2026-42171 |
high | 7.8 | 0.0021 | 2026-10-29 | NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL tem | |
CVE-2026-6979 |
low | 2.1 | 0.0025 | 2026-10-29 | A flaw has been found in devlikeapro WAHA up to 2026.3.4. This affects an unknown function | |
CVE-2026-6980 |
medium | 5.5 | 0.0278 | 2026-10-29 | A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230e | |
CVE-2026-6981 |
low | 2.1 | 0.0025 | 2026-10-29 | A vulnerability was found in IhateCreatingUserNames2 AiraHub2 up to 3e4b77fd7d48ed811ffe5b | |
CVE-2026-6982 |
medium | 5.3 | 0.0024 | 2026-10-29 | A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by t | |
CVE-2026-6984 |
low | 2.0 | 0.0030 | 2026-10-29 | A security flaw has been discovered in AstrBotDevs AstrBot up to 4.22.1. This affects the | |
CVE-2026-6985 |
medium | 5.5 | 0.0056 | 2026-10-29 | A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects | |
CVE-2026-6986 |
low | 2.9 | 0.0022 | 2026-10-29 | A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affe | |
CVE-2026-6988 |
high | 7.4 | 0.0062 | 2026-10-29 | A flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue affects t | |
CVE-2026-6989 |
low | 2.1 | 0.0318 | 2026-10-29 | A vulnerability has been found in Tenda F453 up to 1.0.0.3. Impacted is the function Tenda | |
CVE-2026-6990 |
low | 2.0 | 0.0025 | 2026-10-29 | A vulnerability was found in projeto-siga siga 11.0.3.18. The affected element is an unkno | |
CVE-2026-6991 |
low | 2.1 | 0.0023 | 2026-10-29 | A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an u | |
CVE-2026-6992 |
high | 7.3 | 0.0815 | 2026-10-29 | A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function B | |
CVE-2026-6993 |
medium | 5.5 | 0.0032 | 2026-10-29 | A security flaw has been discovered in go-kratos kratos up to 2.9.2. This impacts the func | |
CVE-2026-6995 |
low | 1.9 | 0.0024 | 2026-10-29 | A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacte | |
CVE-2026-6996 |
low | 1.9 | 0.0024 | 2026-10-29 | A weakness has been identified in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This affects an |