Browse All CVEs
33,189 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-22741 |
low | 3.1 | 0.0024 | 2026-10-29 | Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving stati | |
CVE-2026-22745 |
medium | 5.3 | 0.0034 | 2026-10-29 | Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resol | |
CVE-2026-42641 |
medium | 5.4 | 0.0014 | 2026-10-29 | Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-imag | |
CVE-2026-42642 |
medium | 5.3 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly | |
CVE-2026-42643 |
medium | 5.9 | 0.0014 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42644 |
medium | 5.3 | 0.0025 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-42645 |
medium | 4.3 | 0.0010 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barco | |
CVE-2026-42646 |
high | 7.6 | 0.0023 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-42648 |
medium | 4.3 | 0.0016 | 2026-10-29 | Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenb | |
CVE-2026-42652 |
high | 7.1 | 0.0015 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-42519 |
medium | 4.3 | 0.0017 | 2026-10-29 | A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earli | |
CVE-2026-42520 |
high | 7.5 | 0.0041 | 2026-10-29 | Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file n | |
CVE-2026-42521 |
medium | 6.5 | 0.0025 | 2026-10-29 | Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) inv | |
CVE-2026-42522 |
medium | 4.3 | 0.0018 | 2026-10-29 | A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ a | |
CVE-2026-42523 |
critical | 9.0 | 0.0028 | 2026-10-29 | Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part | |
CVE-2026-42524 |
high | 8.0 | 0.0028 | 2026-10-29 | Jenkins HTML Publisher Plugin 427 and earlier does not escape job name and URL in the lega | |
CVE-2026-42525 |
medium | 4.3 | 0.0021 | 2026-10-29 | Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does | |
CVE-2026-5140 |
high | 8.8 | 0.0048 | 2026-10-29 | Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILG | |
CVE-2026-25852 |
medium | 6.7 | 0.0009 | 2026-10-29 | Local privilege escalation due to DLL hijacking vulnerability. The following products are | |
CVE-2026-36837 |
high | 7.5 | 0.0031 | 2026-10-29 | TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffe | |
CVE-2026-41220 |
high | 7.8 | 0.0011 | 2026-10-29 | Local privilege escalation due to improper input validation. The following products are af | |
CVE-2026-41952 |
high | 7.8 | 0.0011 | 2026-10-29 | Local privilege escalation due to improper input validation. The following products are af | |
CVE-2026-5141 |
high | 8.8 | 0.0023 | 2026-10-29 | Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vul | |
CVE-2026-5161 |
high | 8.8 | 0.0033 | 2026-10-29 | Improper link resolution before file access ('link following') vulnerability in TUBITAK BI | |
CVE-2026-7111 |
high | 8.4 | 0.0016 | 2026-10-29 | Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks | |
CVE-2026-7384 |
medium | 5.5 | 0.0042 | 2026-10-29 | A vulnerability was detected in ezequiroga mcp-bases 357ca19c7a49a9b9cb2ef639b366f03aba8be | |
CVE-2025-56535 |
medium | 6.1 | 0.0019 | 2026-10-29 | A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to exe | |
CVE-2025-56536 |
medium | 6.1 | 0.0019 | 2026-10-29 | A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers | |
CVE-2026-2810 |
medium | 6.8 | 0.0012 | 2026-10-29 | Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client | |
CVE-2026-40229 |
medium | 5.1 | 0.0018 | 2026-10-29 | Helpy contains a stored cross-site scripting vulnerability in the post author display logi | |
CVE-2026-40230 |
medium | 4.8 | 0.0018 | 2026-10-29 | Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rende | |
CVE-2026-41940 |
critical | 9.3 | 0.9853 | 2026-10-29 | KEV | WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authenticati |
CVE-2026-5166 |
critical | 9.6 | 0.0033 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-6849 |
high | 8.8 | 0.0101 | 2026-10-29 | Improper neutralization of special elements used in an OS command ('OS command injection') | |
CVE-2026-7386 |
medium | 5.5 | 0.0043 | 2026-10-29 | A flaw has been found in fatbobman mail-mcp-bridge up to 1.3.3. Affected is an unknown fun | |
CVE-2026-7390 |
low | 2.0 | 0.0019 | 2026-10-29 | A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Th | |
CVE-2026-0204 |
high | 8.0 | 0.0038 | 2026-10-29 | A vulnerability in the access control mechanism of SonicOS may allow certain management in | |
CVE-2026-0205 |
medium | 6.8 | 0.0039 | 2026-10-29 | A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to intera | |
CVE-2026-0206 |
medium | 4.9 | 0.0050 | 2026-10-29 | A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remo | |
CVE-2026-6914 |
high | 7.1 | 0.0026 | 2026-10-29 | Computing the MD5 checksum of a malformed BSON object under specific conditions may cause | |
CVE-2026-6915 |
medium | 5.3 | 0.0017 | 2026-10-29 | An authorization flaw in the user management command could allow an authenticated user to | |
CVE-2026-7391 |
low | 2.1 | 0.0019 | 2026-10-29 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affe | |
CVE-2026-7392 |
low | 2.1 | 0.0019 | 2026-10-29 | A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. | |
CVE-2026-7393 |
low | 2.0 | 0.0027 | 2026-10-29 | A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the | |
CVE-2026-26015 |
critical | 10.0 | 0.0117 | 2026-10-29 | DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.1 | |
CVE-2026-5712 |
high | 8.8 | 0.0016 | 2026-10-29 | This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity | |
CVE-2026-7394 |
low | 2.0 | 0.0024 | 2026-10-29 | A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by | |
CVE-2026-7422 |
high | 7.1 | 0.0018 | 2026-10-29 | Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adj | |
CVE-2026-7423 |
medium | 6.0 | 0.0022 | 2026-10-29 | Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V | |
CVE-2026-7424 |
high | 7.2 | 0.0022 | 2026-10-29 | Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V |