Browse All CVEs
33,170 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-34059 |
high | 7.5 | 0.0039 | 2026-10-29 | Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Serv | |
CVE-2026-33857 |
medium | 5.3 | 0.0039 | 2026-10-29 | Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue aff | |
CVE-2026-34032 |
medium | 5.3 | 0.0049 | 2026-10-29 | Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This i | |
CVE-2026-6266 |
— | — | 0.0040 | 2026-10-29 | A flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, a | |
CVE-2026-6499 |
low | 2.4 | 0.0010 | 2026-10-29 | Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique Op | |
CVE-2026-23918 |
— | — | 0.4973 | 2026-10-29 | Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. | |
CVE-2026-29169 |
high | 7.5 | 0.0059 | 2026-10-29 | A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may al | |
CVE-2026-33006 |
medium | 4.8 | 0.0056 | 2026-10-29 | A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Di | |
CVE-2026-33007 |
medium | 5.3 | 0.0051 | 2026-10-29 | A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earli | |
CVE-2026-33523 |
medium | 6.5 | 0.0044 | 2026-10-29 | HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untruste | |
CVE-2026-6500 |
medium | 4.8 | 0.0010 | 2026-10-29 | Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retr | |
CVE-2026-6501 |
medium | 5.3 | 0.0023 | 2026-10-29 | Improper restriction of XML external entity reference vulnerability in ILM Informatique jO | |
CVE-2026-40563 |
high | 8.1 | 0.0046 | 2026-10-29 | Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Ap | |
CVE-2026-24082 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when copying data from a freed source while executing performance counte | |
CVE-2026-24118 |
— | — | 0.0091 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a | |
CVE-2026-24120 |
— | — | 0.0090 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-202 | |
CVE-2026-24781 |
— | — | 0.0119 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a | |
CVE-2026-25266 |
high | 7.8 | 0.0007 | 2026-10-29 | Memory corruption while processing IOCTL command when device is in power-save state. | |
CVE-2026-25293 |
critical | 9.8 | 0.0018 | 2026-10-29 | Buffer overflow due to incorrect authorization in PLC FW | |
CVE-2026-26332 |
critical | 10.0 | 0.0071 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, SuppressedError all | |
CVE-2026-26956 |
— | — | 0.0109 | 2026-10-29 | vm2 is an open source vm/sandbox for Node.js. In version 3.10.4, vm2 is vulnerable to full | |
CVE-2026-40682 |
— | — | 0.0050 | 2026-10-29 | XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryE | |
CVE-2026-42027 |
— | — | 0.0071 | 2026-10-29 | Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Ve | |
CVE-2026-42075 |
high | 8.1 | 0.0064 | 2026-10-29 | Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a pa | |
CVE-2026-42076 |
critical | 9.8 | 0.0170 | 2026-10-29 | Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a co | |
CVE-2026-42077 |
medium | 5.2 | 0.0016 | 2026-10-29 | Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a pr | |
CVE-2026-42078 |
medium | 4.6 | 0.0020 | 2026-10-29 | PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418 | |
CVE-2026-42079 |
high | 8.6 | 0.0014 | 2026-10-29 | PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418 | |
CVE-2026-42080 |
medium | 4.6 | 0.0020 | 2026-10-29 | PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418 | |
CVE-2026-42090 |
critical | 9.6 | 0.0048 | 2026-10-29 | Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook W | |
CVE-2026-42372 |
high | 8.8 | 0.0030 | 2026-10-29 | D-Link DIR-605L Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdo | |
CVE-2026-42373 |
high | 8.8 | 0.0047 | 2026-10-29 | D-Link DIR-605L Hardware Revision B2 (End-of-Life, EOL) contains a hardcoded telnet backdo | |
CVE-2026-42374 |
high | 8.8 | 0.0047 | 2026-10-29 | D-Link DIR-600L Hardware Revision B1 (End-of-Life) contains a hardcoded telnet backdoor. T | |
CVE-2026-42375 |
high | 8.8 | 0.0047 | 2026-10-29 | D-Link DIR-600L Hardware Revision A1 (End-of-Life) contains a hardcoded telnet backdoor. T | |
CVE-2026-42376 |
critical | 9.8 | 0.0046 | 2026-10-29 | D-Link DIR-456U Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdo | |
CVE-2026-42440 |
— | — | 0.0060 | 2026-10-29 | OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader | |
CVE-2026-42809 |
critical | 9.4 | 0.0036 | 2026-10-29 | Apache Polaris can issue broad temporary ("vended") storage credentials during staged tabl | |
CVE-2026-42810 |
critical | 9.4 | 0.0043 | 2026-10-29 | Apache Polaris accepts literal `*` characters in namespace and table names. When it later | |
CVE-2026-42811 |
critical | 9.4 | 0.0043 | 2026-10-29 | In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only | |
CVE-2026-42812 |
critical | 9.4 | 0.0037 | 2026-10-29 | In Apache Iceberg, the table's metadata files are control files: they tell readers which d | |
CVE-2026-0073 |
high | 8.8 | 0.0054 | 2026-10-29 | In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual aut | |
CVE-2026-29004 |
high | 7.2 | 0.0037 | 2026-10-29 | BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 | |
CVE-2026-32834 |
high | 8.7 | 0.0045 | 2026-10-29 | Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains a hardcoded | |
CVE-2026-41471 |
high | 8.2 | 0.0035 | 2026-10-29 | The Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains an infor | |
CVE-2026-41571 |
critical | 9.4 | 0.0037 | 2026-10-29 | Note Mark is an open-source note-taking application. In version 0.19.2, IsPasswordMatch in | |
CVE-2026-41572 |
medium | 5.3 | 0.0024 | 2026-10-29 | Note Mark is an open-source note-taking application. Prior to version 0.19.3, after a note | |
CVE-2026-42052 |
medium | 6.0 | 0.0030 | 2026-10-29 | Beets is the media library management system. Prior to version 2.10.0, the bundled web UI | |
CVE-2026-42084 |
high | 8.1 | 0.0031 | 2026-10-29 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from | |
CVE-2026-42085 |
medium | 4.3 | 0.0031 | 2026-10-29 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from | |
CVE-2026-42086 |
medium | 4.6 | 0.0020 | 2026-10-29 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from |