Browse All CVEs
31,732 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-7553 |
low | 2.0 | 0.0021 | 2026-10-29 | A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vul | |
CVE-2024-13362 |
medium | 6.1 | 0.0028 | 2026-10-29 | Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Script | |
CVE-2026-7554 |
low | 2.9 | 0.0110 | 2026-10-29 | A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some | |
CVE-2026-7555 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was identified in itsourcecode Electronic Judging System 1.0. This affects | |
CVE-2026-42996 |
critical | 10.0 | 0.0057 | 2026-10-29 | JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow v | |
CVE-2026-7584 |
high | 8.4 | 0.0026 | 2026-10-29 | The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynami | |
CVE-2026-40201 |
medium | 5.4 | 0.0024 | 2026-10-29 | @diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title | |
CVE-2026-42402 |
high | 7.5 | 0.0071 | 2026-10-29 | Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity i | |
CVE-2026-42403 |
high | 7.5 | 0.0076 | 2026-10-29 | Apache Neethi does not properly detect circular references in policy definitions. When a W | |
CVE-2026-43001 |
high | 8.0 | 0.0047 | 2026-10-29 | An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not | |
CVE-2026-43003 |
high | 7.5 | 0.0098 | 2026-10-29 | An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Pyth | |
CVE-2026-42404 |
high | 7.2 | 0.0050 | 2026-10-29 | Apache Neethi does not impose any restrictions on URIs when manually fetching remote polic | |
CVE-2026-42778 |
critical | 9.8 | 0.0066 | 2026-10-29 | The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches. Here was the o | |
CVE-2026-42779 |
critical | 9.8 | 0.0123 | 2026-10-29 | The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches. Here was the o | |
CVE-2026-7579 |
medium | 5.5 | 0.0029 | 2026-10-29 | A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue | |
CVE-2026-7581 |
low | 2.1 | 0.0017 | 2026-10-29 | A security vulnerability has been detected in alexta69 MeTube up to 2026.04.09. This affec | |
CVE-2026-31694 |
high | 7.8 | 0.0028 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversize | |
CVE-2026-7582 |
low | 1.9 | 0.0011 | 2026-10-29 | A vulnerability was detected in AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev. T | |
CVE-2026-31775 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Don't en | |
CVE-2026-22165 |
high | 8.1 | 0.0035 | 2026-10-29 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process an | |
CVE-2026-22166 |
high | 8.1 | 0.0039 | 2026-10-29 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process an | |
CVE-2026-22167 |
high | 7.8 | 0.0015 | 2026-10-29 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-23863 |
medium | 6.5 | 0.0053 | 2026-10-29 | An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 co | |
CVE-2026-23866 |
medium | 4.3 | 0.0047 | 2026-10-29 | Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS | |
CVE-2026-21996 |
medium | 5.5 | 0.0011 | 2026-10-29 | An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicio | |
CVE-2026-35233 |
medium | 4.4 | 0.0011 | 2026-10-29 | An unprivileged attacker can craft a user-space process with a malicious ELF binary contai | |
CVE-2026-7588 |
medium | 5.5 | 0.0045 | 2026-10-29 | A vulnerability was found in ggerve coding-standards-mcp. This issue affects the function | |
CVE-2026-7589 |
medium | 5.5 | 0.0045 | 2026-10-29 | A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0 | |
CVE-2026-7590 |
medium | 5.5 | 0.0150 | 2026-10-29 | A vulnerability was identified in eyal-gor p_69_branch_monkey_mcp up to 69bc71874ce40050ef | |
CVE-2026-7591 |
low | 2.1 | 0.0020 | 2026-10-29 | A security flaw has been discovered in TimBroddin astro-mcp-server up to 1.1.1. The impact | |
CVE-2026-7592 |
medium | 5.5 | 0.0026 | 2026-10-29 | A weakness has been identified in itsourcecode Courier Management System 1.0. This affects | |
CVE-2026-39804 |
high | 8.2 | 0.0076 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allow | |
CVE-2026-39805 |
medium | 6.3 | 0.0063 | 2026-10-29 | Inconsistent Interpretation of HTTP Requests vulnerability in mtrudel bandit allows HTTP r | |
CVE-2026-39807 |
medium | 6.3 | 0.0053 | 2026-10-29 | Reliance on Untrusted Inputs in a Security Decision vulnerability in mtrudel bandit allows | |
CVE-2026-42786 |
high | 8.7 | 0.0065 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allow | |
CVE-2026-42788 |
medium | 6.9 | 0.0051 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allow | |
CVE-2026-7593 |
medium | 5.5 | 0.0150 | 2026-10-29 | A security vulnerability has been detected in Sunwood-ai-labs command-executor-mcp-server | |
CVE-2026-7594 |
medium | 5.5 | 0.0042 | 2026-10-29 | A vulnerability was detected in Flux159 mcp-game-asset-gen 0.1.0. Affected is the function | |
CVE-2026-7595 |
low | 2.1 | 0.0024 | 2026-10-29 | A flaw has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by thi | |
CVE-2026-7596 |
low | 2.1 | 0.0043 | 2026-10-29 | A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affect | |
CVE-2026-7597 |
low | 2.1 | 0.0032 | 2026-10-29 | A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.lo | |
CVE-2026-7599 |
low | 2.1 | 0.0029 | 2026-10-29 | A vulnerability was detected in Dayoooun hwpx-mcp 0.2.0. This affects the function save_do | |
CVE-2026-7600 |
low | 2.1 | 0.0122 | 2026-10-29 | A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yii_com | |
CVE-2026-43824 |
— | — | 0.0027 | 2026-10-29 | In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading clear | |
CVE-2026-6812 |
medium | 4.4 | 0.0025 | 2026-10-29 | The Ona theme for WordPress is vulnerable to Server-Side Request Forgery in all versions u | |
CVE-2026-2052 |
high | 8.8 | 0.0077 | 2026-10-29 | The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widget | |
CVE-2026-7606 |
medium | 6.3 | 0.0023 | 2026-10-29 | A weakness has been identified in TRENDnet TEW-821DAP 1.12B01. This issue affects the func | |
CVE-2026-7607 |
high | 8.7 | 0.0063 | 2026-10-29 | A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the | |
CVE-2026-7608 |
low | 2.0 | 0.0570 | 2026-10-29 | A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is | |
CVE-2026-5077 |
medium | 5.4 | 0.0019 | 2026-10-29 | The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles |