Browse All CVEs
33,159 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42229 |
medium | 5.3 | 0.0034 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, an | |
CVE-2026-41922 |
critical | 9.3 | 0.0498 | 2026-10-29 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vu | |
CVE-2026-41923 |
critical | 9.3 | 0.0309 | 2026-10-29 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vu | |
CVE-2026-41924 |
critical | 9.3 | 0.0320 | 2026-10-29 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vu | |
CVE-2026-41925 |
critical | 9.3 | 0.0400 | 2026-10-29 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vu | |
CVE-2026-41926 |
critical | 9.3 | 0.0123 | 2026-10-29 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vu | |
CVE-2026-41927 |
high | 8.3 | 0.0040 | 2026-10-29 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overf | |
CVE-2026-42220 |
medium | 6.5 | 0.0030 | 2026-10-29 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, an auth | |
CVE-2026-42221 |
critical | 9.8 | 0.0134 | 2026-10-29 | Nginx UI is a web user interface for the Nginx web server. From version 2.0.0 to before ve | |
CVE-2026-42222 |
critical | 9.8 | 0.0034 | 2026-10-29 | Nginx UI is a web user interface for the Nginx web server. In version 2.3.5, an unauthenti | |
CVE-2026-42223 |
medium | 6.5 | 0.0029 | 2026-10-29 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the Get | |
CVE-2026-42238 |
critical | 9.0 | 0.0097 | 2026-10-29 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, nginx-u | |
CVE-2026-7776 |
high | 7.5 | 0.0020 | 2026-10-29 | Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to | |
CVE-2026-7791 |
high | 8.5 | 0.0015 | 2026-10-29 | Improper privilege management in the log rotation mechanism of the Skylight Workspace Conf | |
CVE-2026-7782 |
low | 2.1 | 0.0021 | 2026-10-29 | A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the functi | |
CVE-2026-7783 |
low | 2.1 | 0.0024 | 2026-10-29 | A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1. This vulnerability affects the | |
CVE-2026-7784 |
medium | 5.5 | 0.0050 | 2026-10-29 | A vulnerability has been found in RTGS2017 NagaAgent up to 5.1.0. This issue affects some | |
CVE-2026-7788 |
medium | 5.5 | 0.0041 | 2026-10-29 | A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9 | |
CVE-2026-44028 |
high | 7.5 | 0.0018 | 2026-10-29 | An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in | |
CVE-2026-44029 |
medium | 5.3 | 0.0057 | 2026-10-29 | An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "ni | |
CVE-2026-35228 |
high | 8.7 | 0.0022 | 2026-10-29 | Vulnerability in the Oracle MCP Server Helper Tool product of Oracle Open Source Projects | |
CVE-2026-7810 |
medium | 5.5 | 0.0041 | 2026-10-29 | A flaw has been found in UsamaK98 python-notebook-mcp up to a05a232815809a7e425b5fa7be26e0 | |
CVE-2026-7811 |
medium | 5.5 | 0.0042 | 2026-10-29 | A vulnerability has been found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e3 | |
CVE-2026-7812 |
medium | 5.5 | 0.0147 | 2026-10-29 | A vulnerability was found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a | |
CVE-2026-7822 |
low | 2.1 | 0.0020 | 2026-10-29 | A vulnerability was identified in itsourcecode Courier Management System 1.0. This impacts | |
CVE-2026-7823 |
high | 8.9 | 0.0179 | 2026-10-29 | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is t | |
CVE-2026-40797 |
critical | 9.3 | 0.0035 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-6180 |
medium | 4.1 | 0.0034 | 2026-10-29 | A race condition exists in PaperCut MF when processing badge-swipe data from certain HP mu | |
CVE-2026-6418 |
medium | 4.6 | 0.0056 | 2026-10-29 | An issue was discovered in the Shared Account Synchronization component of PaperCut MF (ve | |
CVE-2026-7824 |
medium | 5.9 | 0.0024 | 2026-10-29 | An issue was discovered in the PaperCut Hive Ricoh embedded application. When the "Deep Lo | |
CVE-2026-43869 |
— | — | 0.0063 | 2026-10-29 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. Thi | |
CVE-2026-43868 |
— | — | 0.0071 | 2026-10-29 | Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue af | |
CVE-2026-43870 |
high | 7.3 | 0.0038 | 2026-10-29 | Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Pat | |
CVE-2023-54342 |
critical | 9.3 | 0.0046 | 2026-10-29 | Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code execution vulnerabili | |
CVE-2023-54344 |
critical | 9.3 | 0.0055 | 2026-10-29 | Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that | |
CVE-2023-54345 |
high | 8.7 | 0.0061 | 2026-10-29 | Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPytho | |
CVE-2023-54346 |
high | 8.7 | 0.0031 | 2026-10-29 | WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability t | |
CVE-2023-54347 |
high | 8.7 | 0.0054 | 2026-10-29 | OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers t | |
CVE-2023-54348 |
high | 8.7 | 0.0035 | 2026-10-29 | ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers | |
CVE-2023-54349 |
medium | 5.1 | 0.0027 | 2026-10-29 | AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unaut | |
CVE-2026-6261 |
high | 8.8 | 0.0061 | 2026-10-29 | The Betheme theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, | |
CVE-2026-6262 |
medium | 6.5 | 0.0035 | 2026-10-29 | The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to | |
CVE-2026-30246 |
medium | 6.5 | 0.0025 | 2026-10-29 | Fiber is a web framework for Go. In github.com/gofiber/fiber/v3 versions through 3.1.0, th | |
CVE-2026-6918 |
high | 8.7 | 0.0052 | 2026-10-29 | In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JI | |
CVE-2026-7832 |
medium | 6.4 | 0.0013 | 2026-10-29 | A security flaw has been discovered in IObit Advanced SystemCare 19. This affects an unkno | |
CVE-2026-7833 |
high | 7.3 | 0.0316 | 2026-10-29 | A weakness has been identified in EFM ipTIME C200 up to 1.092. This vulnerability affects | |
CVE-2026-29168 |
high | 7.3 | 0.0063 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's | |
CVE-2026-7778 |
medium | 5.0 | 0.0017 | 2026-10-29 | An issue that could allow a dashboard configuration to be viewed from outside of the autho | |
CVE-2026-7834 |
high | 8.9 | 0.0063 | 2026-10-29 | A security vulnerability has been detected in EFM ipTIME NAS1dual 1.5.24. This issue affec | |
CVE-2026-32689 |
high | 8.7 | 0.0047 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework pho |