Browse All CVEs
33,079 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40923 |
medium | 5.4 | 0.0022 | 2026-10-29 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. | |
CVE-2026-40924 |
medium | 6.5 | 0.0032 | 2026-10-29 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. | |
CVE-2026-40925 |
high | 8.3 | 0.0017 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/configu | |
CVE-2026-40938 |
high | 8.5 | 0.0079 | 2026-10-29 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. | |
CVE-2026-6796 |
medium | 5.3 | 0.0015 | 2026-10-29 | A vulnerability was determined in Sanluan PublicCMS up to 6.202506.d. Affected is the func | |
CVE-2026-6797 |
medium | 5.3 | 0.0027 | 2026-10-29 | A vulnerability was identified in Sanluan PublicCMS up to 6.202506.d. Affected by this vul | |
CVE-2026-6823 |
high | 8.3 | 0.0034 | 2026-10-29 | HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration | |
CVE-2026-1354 |
medium | 5.9 | 0.0013 | 2026-10-29 | Zero Motorcycles firmware versions 44 and prior enable an attacker to forcibly pair a dev | |
CVE-2026-40706 |
high | 8.4 | 0.0016 | 2026-10-29 | In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permiss | |
CVE-2026-40931 |
high | 7.8 | 0.0026 | 2026-10-29 | Compressing is a compressing and uncompressing lib for node. Prior to 2.1.1 and 1.10.5, th | |
CVE-2026-40933 |
critical | 9.9 | 0.1196 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-40939 |
medium | 6.8 | 0.0015 | 2026-10-29 | The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN | |
CVE-2026-40942 |
medium | 6.3 | 0.0029 | 2026-10-29 | The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN | |
CVE-2026-41527 |
medium | 6.9 | 0.0011 | 2026-10-29 | KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a K | |
CVE-2026-6799 |
low | 2.1 | 0.0194 | 2026-10-29 | A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is | |
CVE-2026-6829 |
medium | 5.3 | 0.0026 | 2026-10-29 | nesquena hermes-webui contains a trust-boundary failure vulnerability that allows authenti | |
CVE-2026-6830 |
medium | 4.8 | 0.0011 | 2026-10-29 | nesquena hermes-webui contains an environment variable leakage vulnerability where profile | |
CVE-2026-6832 |
high | 7.2 | 0.0047 | 2026-10-29 | Hermes WebUI contains an arbitrary file deletion vulnerability in the /api/session/delete | |
CVE-2026-3307 |
medium | 5.3 | 0.0027 | 2026-10-29 | An authorization bypass vulnerability was identified in GitHub Enterprise Server that allo | |
CVE-2026-40926 |
high | 7.1 | 0.0017 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, three admin-only | |
CVE-2026-40928 |
medium | 5.4 | 0.0011 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, multiple AVideo | |
CVE-2026-40929 |
medium | 5.4 | 0.0011 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/comment | |
CVE-2026-40935 |
medium | 5.3 | 0.0022 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/getCapt | |
CVE-2026-41055 |
medium | 5.3 | 0.0038 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, an incomplete SS | |
CVE-2026-41056 |
high | 8.1 | 0.0034 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `allowOrigin | |
CVE-2026-41057 |
high | 7.1 | 0.0013 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the CORS origin | |
CVE-2026-41058 |
high | 8.1 | 0.0047 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the incomplete f | |
CVE-2026-41060 |
medium | 6.5 | 0.0030 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `isSSRFSafeU | |
CVE-2026-41061 |
medium | 5.4 | 0.0017 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `isValidDura | |
CVE-2026-41062 |
medium | 6.5 | 0.0072 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the directory tr | |
CVE-2026-41063 |
medium | 5.4 | 0.0022 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, an incomplete XS | |
CVE-2026-4296 |
high | 7.5 | 0.0043 | 2026-10-29 | An incorrect regular expression vulnerability was identified in GitHub Enterprise Server t | |
CVE-2026-5512 |
medium | 5.3 | 0.0030 | 2026-10-29 | An improper authorization vulnerability was identified in GitHub Enterprise Server that al | |
CVE-2026-5845 |
high | 7.2 | 0.0029 | 2026-10-29 | An improper authorization vulnerability in scoped user-to-server (ghu_) token authorizatio | |
CVE-2026-5921 |
high | 8.9 | 0.0042 | 2026-10-29 | A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Ser | |
CVE-2026-40343 |
medium | 6.9 | 0.0863 | 2026-10-29 | free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5 | |
CVE-2026-41064 |
critical | 9.3 | 0.0034 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, an inc | |
CVE-2026-41128 |
medium | 5.3 | 0.0025 | 2026-10-29 | Craft CMS is a content management system (CMS). In versions 5.6.0 through 5.9.14, the `act | |
CVE-2026-41129 |
medium | 5.5 | 0.0027 | 2026-10-29 | Craft CMS is a content management system (CMS). Versions on the 4.x branch through 4.17.8 | |
CVE-2026-41130 |
medium | 5.5 | 0.0033 | 2026-10-29 | Craft CMS is a content management system (CMS). In versions on the 4.x branch through 4.17 | |
CVE-2026-41135 |
high | 7.5 | 0.0052 | 2026-10-29 | free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project fo | |
CVE-2026-41136 |
medium | 5.5 | 0.0028 | 2026-10-29 | free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-s | |
CVE-2026-41144 |
critical | 9.8 | 0.0043 | 2026-10-29 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | |
CVE-2026-41304 |
high | 8.9 | 0.0222 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `cloneServer | |
CVE-2026-41146 |
high | 8.7 | 0.0037 | 2026-10-29 | facil.io is a C micro-framework for web applications. Prior to commit 5128747363055201d3ec | |
CVE-2026-41457 |
medium | 6.9 | 0.0027 | 2026-10-29 | OwnTone Server versions 28.4 through 29.0 contain a SQL injection vulnerability in DAAP qu | |
CVE-2026-41458 |
high | 8.2 | 0.0036 | 2026-10-29 | OwnTone Server versions 28.4 through 29.0 contain a race condition vulnerability in the DA | |
CVE-2026-6392 |
low | 2.7 | 0.0019 | 2026-10-29 | Tanium addressed an information disclosure vulnerability in Threat Response. | |
CVE-2026-6408 |
low | 2.7 | 0.0018 | 2026-10-29 | Tanium addressed an information disclosure vulnerability in Tanium Server. | |
CVE-2026-6416 |
medium | 4.9 | 0.0026 | 2026-10-29 | Tanium addressed an uncontrolled resource consumption vulnerability in Interact. |