Browse All CVEs
33,202 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-7143 |
low | 2.1 | 0.0019 | 2026-10-29 | A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. | |
CVE-2026-7144 |
low | 2.1 | 0.0022 | 2026-10-29 | A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. | |
CVE-2026-7145 |
medium | 5.3 | 0.0024 | 2026-10-29 | A weakness has been identified in mettle sendportal up to 3.0.1. Affected is the function | |
CVE-2026-7146 |
medium | 5.5 | 0.0032 | 2026-10-29 | A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a5 | |
CVE-2026-32655 |
high | 7.8 | 0.0010 | 2026-10-29 | Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privileg | |
CVE-2026-40970 |
medium | 6.8 | 0.0014 | 2026-10-29 | When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does | |
CVE-2026-7147 |
medium | 5.5 | 0.0028 | 2026-10-29 | A vulnerability was detected in JoeCastrom mcp-chat-studio up to 1.5.0. Affected by this i | |
CVE-2026-7148 |
low | 2.1 | 0.0024 | 2026-10-29 | A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of t | |
CVE-2026-7149 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca7 | |
CVE-2026-7150 |
low | 2.1 | 0.0020 | 2026-10-29 | A vulnerability was found in dh1011 auto-favicon up to f189116a9259950c2393f114dbcb94dde0a | |
CVE-2026-7151 |
high | 7.4 | 0.0063 | 2026-10-29 | A vulnerability was determined in Tenda HG3 2.0. Impacted is the function formUploadConfig | |
CVE-2026-7152 |
high | 8.9 | 0.0177 | 2026-10-29 | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected eleme | |
CVE-2026-7153 |
high | 8.9 | 0.0177 | 2026-10-29 | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The impacted | |
CVE-2026-3087 |
medium | 6.0 | 0.0055 | 2026-10-29 | If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containi | |
CVE-2026-7154 |
high | 8.9 | 0.0179 | 2026-10-29 | A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. This affects the f | |
CVE-2026-7155 |
high | 8.9 | 0.0177 | 2026-10-29 | A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. This i | |
CVE-2026-7156 |
high | 8.9 | 0.0179 | 2026-10-29 | A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. Affected is the func | |
CVE-2026-7157 |
medium | 5.5 | 0.0147 | 2026-10-29 | A flaw has been found in disler aider-mcp-server up to b2516fa466d0d851932da92ee6d0e66946d | |
CVE-2026-7158 |
medium | 5.5 | 0.0029 | 2026-10-29 | A vulnerability has been found in dmitryglhf mcp-url-downloader up to 4b8cf2de55f6e8864a77 | |
CVE-2026-7159 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the functi | |
CVE-2026-7160 |
high | 7.4 | 0.0327 | 2026-10-29 | A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the function f | |
CVE-2026-7177 |
medium | 5.5 | 0.0036 | 2026-10-29 | A security flaw has been discovered in ChatGPTNextWeb NextChat up to 2.16.1. Affected by t | |
CVE-2026-40355 |
high | 7.5 | 0.0065 | 2026-10-29 | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an appl | |
CVE-2026-42510 |
high | 7.2 | 0.0057 | 2026-10-29 | OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration th | |
CVE-2026-7224 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This a | |
CVE-2026-7225 |
medium | 5.5 | 0.0025 | 2026-10-29 | A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This vulner | |
CVE-2026-7226 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. | |
CVE-2026-7227 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is t | |
CVE-2026-7228 |
medium | 5.5 | 0.0025 | 2026-10-29 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element | |
CVE-2026-40356 |
high | 7.5 | 0.0060 | 2026-10-29 | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant ou | |
CVE-2026-40967 |
high | 8.6 | 0.0039 | 2026-10-29 | In Spring AI, various FilterExpressionConverter implementations accept a filter expression | |
CVE-2026-7229 |
low | 2.1 | 0.0023 | 2026-10-29 | A vulnerability was found in code-projects Coaching Management System 1.0. This affects an | |
CVE-2026-7230 |
low | 2.1 | 0.0026 | 2026-10-29 | A vulnerability was found in SourceCodester Safety Anger Pad 1.0. The affected element is | |
CVE-2026-7233 |
low | 1.9 | 0.0024 | 2026-10-29 | A vulnerability was determined in Artifex MuPDF up to 1.28.0. The impacted element is the | |
CVE-2026-7234 |
medium | 5.5 | 0.0043 | 2026-10-29 | A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affec | |
CVE-2026-40966 |
medium | 5.9 | 0.0023 | 2026-10-29 | In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memor | |
CVE-2026-41525 |
medium | 6.5 | 0.0013 | 2026-10-29 | KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) | |
CVE-2026-41526 |
high | 7.8 | 0.0017 | 2026-10-29 | In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so | |
CVE-2026-7235 |
medium | 5.5 | 0.0046 | 2026-10-29 | A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to b185 | |
CVE-2026-7237 |
medium | 5.5 | 0.0045 | 2026-10-29 | A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27. Affected by this issue | |
CVE-2026-7238 |
low | 2.0 | 0.0023 | 2026-10-29 | A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part | |
CVE-2026-7240 |
high | 8.9 | 0.0243 | 2026-10-29 | A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability | |
CVE-2026-40978 |
high | 8.8 | 0.0034 | 2026-10-29 | SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execu | |
CVE-2026-40979 |
medium | 6.1 | 0.0010 | 2026-10-29 | In Spring AI, having access to a shared environment can expose the ONNX model used by the | |
CVE-2026-40980 |
medium | 6.5 | 0.0024 | 2026-10-29 | In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreason | |
CVE-2026-7241 |
high | 8.9 | 0.0245 | 2026-10-29 | A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the | |
CVE-2026-7242 |
high | 8.9 | 0.0245 | 2026-10-29 | A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the fu | |
CVE-2026-7243 |
high | 8.9 | 0.0245 | 2026-10-29 | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected eleme | |
CVE-2026-7244 |
high | 8.9 | 0.0242 | 2026-10-29 | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The impacted | |
CVE-2026-7247 |
high | 7.3 | 0.0072 | 2026-10-29 | A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the |