Browse All CVEs
30,169 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-6163 |
medium | 5.5 | 0.0032 | 2026-10-29 | A vulnerability was identified in code-projects Lost and Found Thing Management 1.0. Affec | |
CVE-2026-6164 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. | |
CVE-2026-6165 |
medium | 5.5 | 0.0025 | 2026-10-29 | A weakness has been identified in code-projects Vehicle Showroom Management System 1.0. Th | |
CVE-2026-34865 |
critical | 10.0 | 0.0021 | 2026-10-29 | Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of thi | |
CVE-2026-34866 |
medium | 5.1 | 0.0008 | 2026-10-29 | Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of thi | |
CVE-2026-40436 |
high | 7.5 | 0.0019 | 2026-10-29 | The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the man | |
CVE-2026-5085 |
critical | 9.1 | 0.0034 | 2026-10-29 | Solstice::Session versions through 1440 for Perl generates session ids insecurely. The _g | |
CVE-2026-5936 |
critical | 9.8 | 0.0019 | 2026-10-29 | An attacker can control a server-side HTTP request by supplying a crafted URL, causing the | |
CVE-2026-6166 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security vulnerability has been detected in code-projects Vehicle Showroom Management Sy | |
CVE-2026-6167 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was detected in code-projects Faculty Management System 1.0. Impacted is a | |
CVE-2026-6168 |
high | 7.4 | 0.0057 | 2026-10-29 | A flaw has been found in TOTOLINK A7000R up to 9.1.0u.6115. The affected element is the fu | |
CVE-2026-0232 |
medium | 4.0 | 0.0015 | 2026-10-29 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Window | |
CVE-2026-0233 |
low | 2.0 | 0.0018 | 2026-10-29 | A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience | |
CVE-2026-0234 |
high | 7.2 | 0.0023 | 2026-10-29 | An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR a | |
CVE-2026-4810 |
critical | 9.3 | 0.0182 | 2026-10-29 | A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit | |
CVE-2026-35337 |
high | 8.8 | 0.0101 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in Apache Storm. Versions Affected: befor | |
CVE-2026-35565 |
medium | 5.4 | 0.0047 | 2026-10-29 | Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI V | |
CVE-2026-34476 |
high | 7.1 | 0.0048 | 2026-10-29 | Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. Thi | |
CVE-2026-33858 |
high | 8.8 | 0.0059 | 2026-10-29 | Dag Authors, who normally should not be able to execute code in the webserver context coul | |
CVE-2026-6182 |
medium | 5.5 | 0.0031 | 2026-10-29 | A vulnerability was identified in code-projects Simple Content Management System 1.0. Affe | |
CVE-2026-6183 |
medium | 5.5 | 0.0031 | 2026-10-29 | A security flaw has been discovered in code-projects Simple Content Management System 1.0. | |
CVE-2025-66769 |
high | 7.5 | 0.0044 | 2026-10-29 | A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cau | |
CVE-2026-6184 |
low | 1.9 | 0.0030 | 2026-10-29 | A weakness has been identified in code-projects Simple Content Management System 1.0. This | |
CVE-2026-6186 |
high | 7.4 | 0.0061 | 2026-10-29 | A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This vu | |
CVE-2026-6187 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Th | |
CVE-2026-6188 |
medium | 5.5 | 0.0025 | 2026-10-29 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted | |
CVE-2026-6231 |
medium | 5.3 | 0.0018 | 2026-10-29 | The bson_validate function may return early on specific inputs and incorrectly report succ | |
CVE-2026-39940 |
medium | 5.3 | 0.0027 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.0.0, it was possible in m | |
CVE-2026-6189 |
medium | 5.5 | 0.0027 | 2026-10-29 | A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. | |
CVE-2026-6190 |
low | 2.1 | 0.0019 | 2026-10-29 | A vulnerability was found in itsourcecode Construction Management System 1.0. The impacted | |
CVE-2026-6191 |
low | 2.1 | 0.0019 | 2026-10-29 | A vulnerability was determined in itsourcecode Construction Management System 1.0. This af | |
CVE-2026-6192 |
low | 1.9 | 0.0011 | 2026-10-29 | A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the functio | |
CVE-2026-6193 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1. Affec | |
CVE-2026-28291 |
— | — | 0.0077 | 2026-10-29 | simple-git enables running native Git commands from JavaScript. Versions up to and includi | |
CVE-2026-32316 |
high | 7.5 | 0.0079 | 2026-10-29 | jq is a command-line JSON processor. An integer overflow vulnerability exists through vers | |
CVE-2026-6100 |
critical | 9.1 | 0.0058 | 2026-10-29 | Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, a | |
CVE-2026-6194 |
high | 7.4 | 0.0047 | 2026-10-29 | A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulner | |
CVE-2026-6195 |
high | 8.9 | 0.1351 | 2026-10-29 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affec | |
CVE-2026-6196 |
high | 7.4 | 0.0057 | 2026-10-29 | A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeComma | |
CVE-2026-40038 |
medium | 5.1 | 0.0016 | 2026-10-29 | Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to | |
CVE-2026-40039 |
high | 7.1 | 0.0034 | 2026-10-29 | Pachno 1.0.6 contains an open redirection vulnerability that allows attackers to redirect | |
CVE-2026-40040 |
high | 8.7 | 0.0047 | 2026-10-29 | Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated | |
CVE-2026-40041 |
medium | 5.3 | 0.0011 | 2026-10-29 | Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to | |
CVE-2026-40042 |
critical | 9.3 | 0.0037 | 2026-10-29 | Pachno 1.0.6 contains an XML external entity injection vulnerability that allows unauthent | |
CVE-2026-40043 |
high | 7.1 | 0.0038 | 2026-10-29 | Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action | |
CVE-2026-40044 |
critical | 9.3 | 0.0048 | 2026-10-29 | Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticated attacker | |
CVE-2026-6197 |
high | 7.4 | 0.0055 | 2026-10-29 | A flaw has been found in Tenda F456 1.0.0.5. This vulnerability affects the function formW | |
CVE-2026-6198 |
high | 7.4 | 0.0045 | 2026-10-29 | A vulnerability has been found in Tenda F456 1.0.0.5. This issue affects the function from | |
CVE-2026-6199 |
high | 7.4 | 0.0047 | 2026-10-29 | A vulnerability was found in Tenda F456 1.0.0.5. Impacted is the function fromqossetting o | |
CVE-2026-6200 |
high | 7.4 | 0.0045 | 2026-10-29 | A vulnerability was determined in Tenda F456 1.0.0.5. The affected element is the function |