Browse All CVEs
31,790 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-7424 |
high | 7.2 | 0.0022 | 2026-10-29 | Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V | |
CVE-2026-7439 |
medium | 4.8 | 0.0009 | 2026-10-29 | AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/r | |
CVE-2026-7466 |
high | 7.7 | 0.0034 | 2026-10-29 | AgentFlow contains an arbitrary code execution vulnerability that allows attackers to exec | |
CVE-2026-34965 |
high | 8.7 | 0.0084 | 2026-10-29 | Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/ | |
CVE-2026-7400 |
medium | 5.5 | 0.0043 | 2026-10-29 | A security vulnerability has been detected in geekgod382 filesystem-mcp-server 1.0.0. This | |
CVE-2026-7401 |
low | 2.1 | 0.0032 | 2026-10-29 | A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predic | |
CVE-2026-7425 |
medium | 6.0 | 0.0023 | 2026-10-29 | Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS- | |
CVE-2026-7426 |
medium | 6.1 | 0.0025 | 2026-10-29 | Insufficient validation of the prefix length field in IPv6 Router Advertisement processing | |
CVE-2026-1858 |
medium | 4.8 | 0.0015 | 2026-10-29 | wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EK | |
CVE-2026-7403 |
medium | 5.5 | 0.0056 | 2026-10-29 | A security flaw has been discovered in geldata gel-mcp 0.1.0. This impacts the function li | |
CVE-2026-7404 |
medium | 5.5 | 0.0051 | 2026-10-29 | A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected i | |
CVE-2026-7407 |
low | 2.0 | 0.0025 | 2026-10-29 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. | |
CVE-2026-7408 |
low | 2.0 | 0.0025 | 2026-10-29 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by t | |
CVE-2026-7409 |
low | 2.0 | 0.0020 | 2026-10-29 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the fun | |
CVE-2026-7410 |
low | 2.1 | 0.0019 | 2026-10-29 | A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This vulner | |
CVE-2026-7416 |
medium | 5.5 | 0.0179 | 2026-10-29 | A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the fun | |
CVE-2026-7417 |
medium | 5.5 | 0.0036 | 2026-10-29 | A vulnerability was found in Algovate xhs-mcp 0.8.11. This affects the function xhs_publis | |
CVE-2026-7418 |
high | 7.4 | 0.0056 | 2026-10-29 | A vulnerability was determined in UTT HiPER 1250GW up to 3.2.7-210907-180535. This vulnera | |
CVE-2026-7381 |
critical | 9.1 | 0.0044 | 2026-10-29 | Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled | |
CVE-2026-7419 |
high | 7.4 | 0.0054 | 2026-10-29 | A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue a | |
CVE-2026-7420 |
high | 7.4 | 0.0046 | 2026-10-29 | A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacte | |
CVE-2026-7443 |
medium | 5.5 | 0.0152 | 2026-10-29 | A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this | |
CVE-2026-7445 |
low | 2.1 | 0.0029 | 2026-10-29 | A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected | |
CVE-2026-7446 |
medium | 5.5 | 0.0154 | 2026-10-29 | A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the funct | |
CVE-2026-7447 |
low | 2.1 | 0.0025 | 2026-10-29 | A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnera | |
CVE-2026-7468 |
medium | 5.5 | 0.0036 | 2026-10-29 | A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affe | |
CVE-2026-7469 |
low | 2.1 | 0.0142 | 2026-10-29 | A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts | |
CVE-2026-7470 |
high | 7.4 | 0.0052 | 2026-10-29 | A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the fun | |
CVE-2026-7375 |
high | 7.5 | 0.0019 | 2026-10-29 | UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allow | |
CVE-2026-41226 |
medium | 5.1 | 0.0030 | 2026-10-29 | Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ric | |
CVE-2026-42798 |
medium | 4.0 | 0.0013 | 2026-10-29 | Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in c | |
CVE-2026-5299 |
medium | 5.5 | 0.0012 | 2026-10-29 | ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows | |
CVE-2026-5402 |
— | — | 0.0039 | 2026-10-29 | TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service | |
CVE-2026-5654 |
high | 7.5 | 0.0021 | 2026-10-29 | AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of servic | |
CVE-2026-6519 |
high | 7.5 | 0.0017 | 2026-10-29 | MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allo | |
CVE-2026-6520 |
high | 7.5 | 0.0017 | 2026-10-29 | OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4. | |
CVE-2026-6522 |
medium | 5.5 | 0.0012 | 2026-10-29 | RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4. | |
CVE-2026-6524 |
medium | 5.5 | 0.0012 | 2026-10-29 | MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows deni | |
CVE-2026-6526 |
medium | 5.5 | 0.0012 | 2026-10-29 | RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 | |
CVE-2026-6528 |
medium | 5.5 | 0.0014 | 2026-10-29 | TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service | |
CVE-2026-6530 |
medium | 5.5 | 0.0016 | 2026-10-29 | DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows d | |
CVE-2026-6533 |
medium | 5.5 | 0.0015 | 2026-10-29 | Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 | |
CVE-2026-6538 |
medium | 5.5 | 0.0018 | 2026-10-29 | BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denia | |
CVE-2026-6870 |
medium | 5.5 | 0.0016 | 2026-10-29 | GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows den | |
CVE-2026-22070 |
critical | 9.8 | 0.0021 | 2026-10-29 | ColorOS Assistant has an unauthenticated start-download channel, leading to file path trav | |
CVE-2026-42799 |
critical | 9.8 | 0.0028 | 2026-10-29 | Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. | |
CVE-2026-41016 |
medium | 5.9 | 0.0027 | 2026-10-29 | Apache Airflow's SMTP provider `SmtpHook` called Python's `smtplib.SMTP.starttls()` withou | |
CVE-2026-42800 |
medium | 5.3 | 0.0024 | 2026-10-29 | NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_clien | |
CVE-2026-1493 |
medium | 4.6 | 0.0018 | 2026-10-29 | LEX Baza Dokumentów is vulnerable to DOM-based XSS in "em" cookie parameter. The applicati | |
CVE-2026-41882 |
high | 7.5 | 0.0040 | 2026-10-29 | In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026 |