Browse All CVEs
31,824 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-67223 |
high | 7.5 | 0.0063 | 2026-10-29 | The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.1 | |
CVE-2026-40968 |
high | 8.8 | 0.0017 | 2026-10-29 | When an authenticated user is denied access to a gRPC method, their authenticated identity | |
CVE-2026-40969 |
medium | 5.3 | 0.0020 | 2026-10-29 | The raw message of every server-side AuthenticationException is returned to the unauthenti | |
CVE-2026-7282 |
low | 2.0 | 0.0021 | 2026-10-29 | A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. | |
CVE-2026-7283 |
low | 2.0 | 0.0026 | 2026-10-29 | A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System | |
CVE-2026-7288 |
high | 7.4 | 0.0069 | 2026-10-29 | A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the f | |
CVE-2026-7289 |
high | 7.4 | 0.0072 | 2026-10-29 | A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub_4 | |
CVE-2026-7320 |
— | — | 0.0032 | 2026-10-29 | Information disclosure due to incorrect boundary conditions in the Audio/Video component. | |
CVE-2026-7321 |
critical | 9.6 | 0.0026 | 2026-10-29 | Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. T | |
CVE-2026-7322 |
— | — | 0.0032 | 2026-10-29 | Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of th | |
CVE-2026-7323 |
— | — | 0.0037 | 2026-10-29 | Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of th | |
CVE-2026-7324 |
— | — | 0.0030 | 2026-10-29 | Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence of m | |
CVE-2026-41873 |
critical | 9.8 | 0.0044 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Reques | |
CVE-2026-24178 |
critical | 9.8 | 0.0057 | 2026-10-29 | NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authenticatio | |
CVE-2026-24186 |
high | 8.8 | 0.0048 | 2026-10-29 | NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserializ | |
CVE-2026-24204 |
medium | 6.5 | 0.0036 | 2026-10-29 | NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Va | |
CVE-2026-24222 |
high | 8.6 | 0.0040 | 2026-10-29 | NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization compone | |
CVE-2026-24231 |
medium | 6.3 | 0.0013 | 2026-10-29 | NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection comp | |
CVE-2026-3893 |
critical | 9.4 | 0.0037 | 2026-10-29 | The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker | |
CVE-2026-5794 |
medium | 4.9 | 0.0026 | 2026-10-29 | A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to p | |
CVE-2026-6807 |
medium | 5.5 | 0.0020 | 2026-10-29 | A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to trigger improper han | |
CVE-2026-7293 |
low | 2.0 | 0.0021 | 2026-10-29 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected is t | |
CVE-2026-7294 |
low | 1.9 | 0.0021 | 2026-10-29 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vul | |
CVE-2026-21023 |
medium | 6.9 | 0.0010 | 2026-10-29 | Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2 | |
CVE-2026-35155 |
high | 7.1 | 0.0022 | 2026-10-29 | Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Cre | |
CVE-2026-42377 |
high | 7.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting In | |
CVE-2026-3325 |
critical | 10.0 | 0.0027 | 2026-10-29 | SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of | |
CVE-2026-42412 |
medium | 6.5 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrect | |
CVE-2026-42513 |
high | 8.8 | 0.0048 | 2026-10-29 | This vulnerability exists in e-Sushrut due to improper authentication logic that relies on | |
CVE-2026-42514 |
high | 8.8 | 0.0023 | 2026-10-29 | This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API res | |
CVE-2026-42515 |
high | 7.1 | 0.0023 | 2026-10-29 | This vulnerability exists in e-Sushrut due to improper access control in resource access v | |
CVE-2026-42516 |
high | 7.1 | 0.0023 | 2026-10-29 | This vulnerability exists in e-Sushrut due to improper authorization checks during resourc | |
CVE-2026-42517 |
high | 7.1 | 0.0023 | 2026-10-29 | This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for pr | |
CVE-2026-42518 |
high | 8.7 | 0.0022 | 2026-10-29 | This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hard | |
CVE-2026-22740 |
medium | 6.5 | 0.0034 | 2026-10-29 | A WebFlux server application that processes multipart requests creates temp files for part | |
CVE-2026-22741 |
low | 3.1 | 0.0024 | 2026-10-29 | Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving stati | |
CVE-2026-22745 |
medium | 5.3 | 0.0034 | 2026-10-29 | Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resol | |
CVE-2026-42641 |
medium | 5.4 | 0.0014 | 2026-10-29 | Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-imag | |
CVE-2026-42642 |
medium | 5.3 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly | |
CVE-2026-42643 |
medium | 5.9 | 0.0014 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42644 |
medium | 5.3 | 0.0025 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-42645 |
medium | 4.3 | 0.0010 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barco | |
CVE-2026-42646 |
high | 7.6 | 0.0023 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-42648 |
medium | 4.3 | 0.0016 | 2026-10-29 | Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenb | |
CVE-2026-42652 |
high | 7.1 | 0.0015 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42519 |
medium | 4.3 | 0.0017 | 2026-10-29 | A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earli | |
CVE-2026-42520 |
high | 7.5 | 0.0041 | 2026-10-29 | Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file n | |
CVE-2026-42521 |
medium | 6.5 | 0.0025 | 2026-10-29 | Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) inv | |
CVE-2026-42522 |
medium | 4.3 | 0.0018 | 2026-10-29 | A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ a | |
CVE-2026-42523 |
critical | 9.0 | 0.0028 | 2026-10-29 | Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part |