Browse All CVEs
33,146 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-35240 |
medium | 4.9 | 0.0024 | 2026-10-29 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). | |
CVE-2026-35241 |
medium | 5.7 | 0.0019 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft | |
CVE-2026-35242 |
high | 7.5 | 0.0011 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-35243 |
high | 7.8 | 0.0011 | 2026-10-29 | Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusi | |
CVE-2026-35244 |
medium | 5.2 | 0.0016 | 2026-10-29 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion | |
CVE-2026-35245 |
high | 7.5 | 0.0025 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-35246 |
high | 7.5 | 0.0011 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-35247 |
medium | 6.0 | 0.0012 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-35248 |
medium | 5.0 | 0.0010 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-35249 |
low | 3.2 | 0.0011 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-35250 |
low | 2.3 | 0.0011 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-35251 |
high | 7.5 | 0.0011 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-35252 |
medium | 6.4 | 0.0016 | 2026-10-29 | Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (componen | |
CVE-2026-40892 |
high | 8.1 | 0.0042 | 2026-10-29 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and | |
CVE-2026-40905 |
high | 8.1 | 0.0029 | 2026-10-29 | LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, a password rese | |
CVE-2026-40910 |
critical | 9.1 | 0.0027 | 2026-10-29 | frp is a fast reverse proxy. From 0.43.0 to 0.68.0, frp contains an authentication bypass | |
CVE-2026-40911 |
critical | 10.0 | 0.0065 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, the YPTSocket pl | |
CVE-2026-40923 |
medium | 5.4 | 0.0022 | 2026-10-29 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. | |
CVE-2026-40924 |
medium | 6.5 | 0.0032 | 2026-10-29 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. | |
CVE-2026-40925 |
high | 8.3 | 0.0017 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/configu | |
CVE-2026-40938 |
high | 8.5 | 0.0079 | 2026-10-29 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. | |
CVE-2026-6796 |
medium | 5.3 | 0.0015 | 2026-10-29 | A vulnerability was determined in Sanluan PublicCMS up to 6.202506.d. Affected is the func | |
CVE-2026-6797 |
medium | 5.3 | 0.0027 | 2026-10-29 | A vulnerability was identified in Sanluan PublicCMS up to 6.202506.d. Affected by this vul | |
CVE-2026-6823 |
high | 8.3 | 0.0034 | 2026-10-29 | HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration | |
CVE-2026-1354 |
medium | 5.9 | 0.0013 | 2026-10-29 | Zero Motorcycles firmware versions 44 and prior enable an attacker to forcibly pair a dev | |
CVE-2026-40706 |
high | 8.4 | 0.0016 | 2026-10-29 | In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permiss | |
CVE-2026-40931 |
high | 7.8 | 0.0026 | 2026-10-29 | Compressing is a compressing and uncompressing lib for node. Prior to 2.1.1 and 1.10.5, th | |
CVE-2026-40933 |
critical | 9.9 | 0.1196 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-40939 |
medium | 6.8 | 0.0015 | 2026-10-29 | The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN | |
CVE-2026-40942 |
medium | 6.3 | 0.0029 | 2026-10-29 | The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN | |
CVE-2026-41527 |
medium | 6.9 | 0.0011 | 2026-10-29 | KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a K | |
CVE-2026-6799 |
low | 2.1 | 0.0194 | 2026-10-29 | A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is | |
CVE-2026-6829 |
medium | 5.3 | 0.0026 | 2026-10-29 | nesquena hermes-webui contains a trust-boundary failure vulnerability that allows authenti | |
CVE-2026-6830 |
medium | 4.8 | 0.0011 | 2026-10-29 | nesquena hermes-webui contains an environment variable leakage vulnerability where profile | |
CVE-2026-6832 |
high | 7.2 | 0.0047 | 2026-10-29 | Hermes WebUI contains an arbitrary file deletion vulnerability in the /api/session/delete | |
CVE-2026-3307 |
medium | 5.3 | 0.0027 | 2026-10-29 | An authorization bypass vulnerability was identified in GitHub Enterprise Server that allo | |
CVE-2026-40926 |
high | 7.1 | 0.0017 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, three admin-only | |
CVE-2026-40928 |
medium | 5.4 | 0.0011 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, multiple AVideo | |
CVE-2026-40929 |
medium | 5.4 | 0.0011 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/comment | |
CVE-2026-40935 |
medium | 5.3 | 0.0022 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/getCapt | |
CVE-2026-41055 |
medium | 5.3 | 0.0038 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, an incomplete SS | |
CVE-2026-41056 |
high | 8.1 | 0.0034 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `allowOrigin | |
CVE-2026-41057 |
high | 7.1 | 0.0013 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the CORS origin | |
CVE-2026-41058 |
high | 8.1 | 0.0047 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the incomplete f | |
CVE-2026-41060 |
medium | 6.5 | 0.0030 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `isSSRFSafeU | |
CVE-2026-41061 |
medium | 5.4 | 0.0017 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `isValidDura | |
CVE-2026-41062 |
medium | 6.5 | 0.0072 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the directory tr | |
CVE-2026-41063 |
medium | 5.4 | 0.0022 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and below, an incomplete XS | |
CVE-2026-4296 |
high | 7.5 | 0.0043 | 2026-10-29 | An incorrect regular expression vulnerability was identified in GitHub Enterprise Server t | |
CVE-2026-5512 |
medium | 5.3 | 0.0030 | 2026-10-29 | An improper authorization vulnerability was identified in GitHub Enterprise Server that al |