Browse All CVEs
33,201 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-41602 |
— | — | 0.0116 | 2026-10-29 | Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language | |
CVE-2026-41604 |
— | — | 0.0092 | 2026-10-29 | Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: befo | |
CVE-2026-41605 |
— | — | 0.0093 | 2026-10-29 | Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache | |
CVE-2026-41606 |
— | — | 0.0110 | 2026-10-29 | Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: | |
CVE-2026-41607 |
— | — | 0.0090 | 2026-10-29 | Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: befo | |
CVE-2026-41636 |
high | 8.7 | 0.0045 | 2026-10-29 | Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects | |
CVE-2026-7264 |
low | 2.1 | 0.0025 | 2026-10-29 | A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is | |
CVE-2026-7279 |
high | 8.5 | 0.0011 | 2026-10-29 | AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authent | |
CVE-2026-7280 |
high | 8.4 | 0.0012 | 2026-10-29 | AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing | |
CVE-2026-3323 |
high | 7.5 | 0.0040 | 2026-10-29 | An unsecured configuration interface on affected devices allows unauthenticated remote att | |
CVE-2026-7265 |
low | 2.1 | 0.0024 | 2026-10-29 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. | |
CVE-2026-7266 |
low | 2.1 | 0.0019 | 2026-10-29 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted | |
CVE-2026-7267 |
low | 2.1 | 0.0019 | 2026-10-29 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects an unkn | |
CVE-2026-7268 |
low | 2.1 | 0.0020 | 2026-10-29 | A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impact | |
CVE-2026-5779 |
critical | 9.4 | 0.0025 | 2026-10-29 | An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specif | |
CVE-2026-5780 |
high | 8.5 | 0.0020 | 2026-10-29 | An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specif | |
CVE-2026-5781 |
high | 8.5 | 0.0023 | 2026-10-29 | An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/mo | |
CVE-2026-7269 |
low | 1.9 | 0.0021 | 2026-10-29 | A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affec | |
CVE-2026-7271 |
medium | 5.5 | 0.0048 | 2026-10-29 | A vulnerability was detected in DV0x creative-ad-agent up to 751b9e5146604dc65049bd0f62dcb | |
CVE-2026-7309 |
medium | 4.3 | 0.0018 | 2026-10-29 | A flaw was found in the OpenShift Container Platform build system. A user with the `edit` | |
CVE-2026-40550 |
medium | 6.9 | 0.0012 | 2026-10-29 | Multiple BinSoft products are vulnerable to Privilege Escalation due to excessive database | |
CVE-2026-40551 |
high | 8.4 | 0.0013 | 2026-10-29 | Multiple BinSoft products perform client-side authentication. An attacker with access to a | |
CVE-2026-40552 |
medium | 4.7 | 0.0029 | 2026-10-29 | Multiple BinSoft products are vulnerable to Remote Command Execution. An authorized user w | |
CVE-2026-5944 |
medium | 6.7 | 0.0053 | 2026-10-29 | An improper access control vulnerability exists in the Cisco Intersight Device Connector f | |
CVE-2026-6706 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper access control in the vault documentation feature in Devolutions Server allows | |
CVE-2026-7272 |
medium | 5.5 | 0.0042 | 2026-10-29 | A flaw has been found in WilliamCloudQi matlab-mcp-server up to ab88f6b9bf5f36f725e8628029 | |
CVE-2026-7281 |
low | 1.9 | 0.0021 | 2026-10-29 | A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. | |
CVE-2025-67223 |
high | 7.5 | 0.0063 | 2026-10-29 | The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.1 | |
CVE-2026-40968 |
high | 8.8 | 0.0017 | 2026-10-29 | When an authenticated user is denied access to a gRPC method, their authenticated identity | |
CVE-2026-40969 |
medium | 5.3 | 0.0020 | 2026-10-29 | The raw message of every server-side AuthenticationException is returned to the unauthenti | |
CVE-2026-7282 |
low | 2.0 | 0.0021 | 2026-10-29 | A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. | |
CVE-2026-7283 |
low | 2.0 | 0.0026 | 2026-10-29 | A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System | |
CVE-2026-7288 |
high | 7.4 | 0.0069 | 2026-10-29 | A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the f | |
CVE-2026-7289 |
high | 7.4 | 0.0072 | 2026-10-29 | A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub_4 | |
CVE-2026-7320 |
— | — | 0.0032 | 2026-10-29 | Information disclosure due to incorrect boundary conditions in the Audio/Video component. | |
CVE-2026-7321 |
critical | 9.6 | 0.0026 | 2026-10-29 | Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. T | |
CVE-2026-7322 |
— | — | 0.0032 | 2026-10-29 | Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of th | |
CVE-2026-7323 |
— | — | 0.0037 | 2026-10-29 | Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of th | |
CVE-2026-7324 |
— | — | 0.0030 | 2026-10-29 | Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence of m | |
CVE-2026-41873 |
critical | 9.8 | 0.0044 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Reques | |
CVE-2026-24178 |
critical | 9.8 | 0.0057 | 2026-10-29 | NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authenticatio | |
CVE-2026-24186 |
high | 8.8 | 0.0048 | 2026-10-29 | NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserializ | |
CVE-2026-24204 |
medium | 6.5 | 0.0036 | 2026-10-29 | NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Va | |
CVE-2026-24222 |
high | 8.6 | 0.0040 | 2026-10-29 | NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization compone | |
CVE-2026-24231 |
medium | 6.3 | 0.0013 | 2026-10-29 | NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection comp | |
CVE-2026-3893 |
critical | 9.4 | 0.0037 | 2026-10-29 | The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker | |
CVE-2026-5794 |
medium | 4.9 | 0.0026 | 2026-10-29 | A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to p | |
CVE-2026-6807 |
medium | 5.5 | 0.0020 | 2026-10-29 | A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to trigger improper han | |
CVE-2026-7293 |
low | 2.0 | 0.0021 | 2026-10-29 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected is t | |
CVE-2026-7294 |
low | 1.9 | 0.0021 | 2026-10-29 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vul |