Browse All CVEs
33,206 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-27843 |
critical | 9.2 | 0.0052 | 2026-10-29 | A vulnerability exists in SenseLive X3050's web management interface that allows critical | |
CVE-2026-29050 |
medium | 6.1 | 0.0014 | 2026-10-29 | melange allows users to build apk packages using declarative pipelines. Starting in versio | |
CVE-2026-29051 |
low | 3.3 | 0.0017 | 2026-10-29 | melange allows users to build apk packages using declarative pipelines. Starting in versio | |
CVE-2026-29197 |
medium | 4.3 | 0.0018 | 2026-10-29 | In versions <8.4.0, <8.3.2, <8.2.2, <8.1.3, <8.0.4, <7.13.6, <7.12.7, <7.11.7, and <7.10.1 | |
CVE-2026-31952 |
high | 8.1 | 0.0025 | 2026-10-29 | Xibo is an open source digital signage platform with a web content management system and W | |
CVE-2026-35064 |
high | 8.7 | 0.0046 | 2026-10-29 | A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery | |
CVE-2026-35503 |
critical | 9.3 | 0.0055 | 2026-10-29 | A vulnerability in SenseLive X3050’s web management interface allows authentication logic | |
CVE-2026-39462 |
critical | 9.3 | 0.0039 | 2026-10-29 | A vulnerability exists in SenseLive X3050’s web management interface in which password upd | |
CVE-2026-40431 |
medium | 6.9 | 0.0019 | 2026-10-29 | A vulnerability exists in SenseLive X3050’s web management interface due to its reliance o | |
CVE-2026-40620 |
critical | 9.3 | 0.0055 | 2026-10-29 | A vulnerability in SenseLive X3050’s embedded management service allows full administrativ | |
CVE-2026-40623 |
high | 7.2 | 0.0032 | 2026-10-29 | A vulnerability in SenseLive X3050's web management interface allows critical system and n | |
CVE-2026-40630 |
critical | 9.3 | 0.0073 | 2026-10-29 | A vulnerability in SenseLive X3050’s web management interface allows unauthorized acces | |
CVE-2026-31953 |
medium | 5.4 | 0.0014 | 2026-10-29 | Xibo is an open source digital signage platform with a web content management system and W | |
CVE-2026-31955 |
medium | 4.9 | 0.0028 | 2026-10-29 | Xibo is an open source digital signage platform with a web content management system and W | |
CVE-2026-31956 |
medium | 4.3 | 0.0027 | 2026-10-29 | Xibo is an open source digital signage platform with a web content management system and W | |
CVE-2026-32870 |
medium | 6.9 | 0.0035 | 2026-10-29 | Kirby is an open-source content management system. Kirby's `Xml::value()` method has speci | |
CVE-2026-34587 |
high | 7.6 | 0.0033 | 2026-10-29 | Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, Kirb | |
CVE-2026-40099 |
medium | 5.3 | 0.0027 | 2026-10-29 | Kirby is an open-source content management system. Kirby's user permissions control which | |
CVE-2026-41325 |
high | 7.1 | 0.0036 | 2026-10-29 | Kirby is an open-source content management system. Kirby's user permissions control which | |
CVE-2026-32952 |
high | 7.5 | 0.0103 | 2026-10-29 | go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to | |
CVE-2026-33317 |
high | 8.7 | 0.0019 | 2026-10-29 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linu | |
CVE-2026-33318 |
high | 8.8 | 0.0047 | 2026-10-29 | Actual is a local-first personal finance tool. Prior to version 26.4.0, any authenticated | |
CVE-2026-41316 |
— | — | 0.0113 | 2026-10-29 | ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygem | |
CVE-2026-41317 |
medium | 6.6 | 0.0016 | 2026-10-29 | Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, m | |
CVE-2026-41318 |
medium | 5.4 | 0.0019 | 2026-10-29 | AnythingLLM is an application that turns pieces of content into context that any LLM can u | |
CVE-2026-41319 |
medium | 5.9 | 0.0022 | 2026-10-29 | MailKit is a cross-platform mail client library built on top of MimeKit. A STARTTLS Respon | |
CVE-2026-41324 |
high | 7.5 | 0.0033 | 2026-10-29 | basic-ftp is an FTP client for Node.js. Versions prior to 5.3.0 are vulnerable to denial o | |
CVE-2026-41430 |
low | 1.3 | 0.0015 | 2026-10-29 | Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, m | |
CVE-2026-6947 |
high | 8.7 | 0.0057 | 2026-10-29 | DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnera | |
CVE-2026-1949 |
critical | 9.8 | 0.0061 | 2026-10-29 | Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the | |
CVE-2026-1950 |
critical | 9.8 | 0.0031 | 2026-10-29 | Delta Electronics AS320T has No checking of the length of the buffer with the file name v | |
CVE-2026-1951 |
critical | 9.8 | 0.0061 | 2026-10-29 | Delta Electronics AS320T has no checking of the length of the buffer with the directory na | |
CVE-2026-1952 |
high | 7.5 | 0.0027 | 2026-10-29 | Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerabil | |
CVE-2026-21728 |
— | — | 0.0064 | 2026-10-29 | Tempo queries with large limits can cause large memory allocations which can impact the av | |
CVE-2026-6272 |
high | 8.5 | 0.0032 | 2026-10-29 | A client holding only a read JWT scope can still register itself as a signal provider thro | |
CVE-2026-40466 |
— | — | 0.0478 | 2026-10-29 | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulne | |
CVE-2026-41043 |
medium | 6.5 | 0.0056 | 2026-10-29 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-41044 |
— | — | 0.0098 | 2026-10-29 | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulne | |
CVE-2026-23902 |
high | 8.1 | 0.0045 | 2026-10-29 | Incorrect Authorization vulnerability in Apache DolphinScheduler allows authenticated user | |
CVE-2026-4313 |
low | 2.4 | 0.0059 | 2026-10-29 | AdaptiveGRC is vulnerable to Stored XSS via text type fields across the forms. Authenticat | |
CVE-2026-6043 |
high | 8.8 | 0.0126 | 2026-10-29 | P4 Server versions prior to 2026.1 are configured with insecure default settings that, whe | |
CVE-2026-21515 |
critical | 9.9 | 0.0070 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an | |
CVE-2026-38743 |
medium | 4.3 | 0.0035 | 2026-10-29 | The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Hum | |
CVE-2026-40690 |
medium | 4.3 | 0.0035 | 2026-10-29 | The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a | |
CVE-2026-5265 |
medium | 6.5 | 0.0063 | 2026-10-29 | When generating an ICMP Destination Unreachable or Packet Too Big response, the handler co | |
CVE-2026-5367 |
— | — | 0.0087 | 2026-10-29 | A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCP | |
CVE-2026-25660 |
critical | 9.3 | 0.0045 | 2026-10-29 | CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Sta | |
CVE-2026-42095 |
medium | 4.0 | 0.0016 | 2026-10-29 | bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket conn | |
CVE-2026-30368 |
medium | 5.4 | 0.0035 | 2026-10-29 | A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows | |
CVE-2026-39920 |
critical | 9.3 | 0.0054 | 2026-10-29 | BridgeHead FileStore versions prior to 24A (released in early 2024) expose the Apache Axis |