Browse All CVEs
33,082 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-8022 |
low | 3.1 | 0.0015 | 2026-10-29 | Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a re | |
CVE-2026-8031 |
medium | 5.5 | 0.0039 | 2026-10-29 | A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7. The affec | |
CVE-2026-40076 |
critical | 9.4 | 0.0085 | 2026-10-29 | OpenMRS Core is an open source electronic medical record system platform. In versions 2.7. | |
CVE-2026-40171 |
high | 8.4 | 0.0048 | 2026-10-29 | In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, a | |
CVE-2026-8032 |
medium | 5.5 | 0.0028 | 2026-10-29 | A flaw has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. The impacted ele | |
CVE-2026-8033 |
medium | 5.5 | 0.0029 | 2026-10-29 | A vulnerability has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. This af | |
CVE-2026-40195 |
high | 7.1 | 0.0040 | 2026-10-29 | Incus is a system container and virtual machine manager. In versions before 7.0.0, missing | |
CVE-2026-40197 |
high | 7.1 | 0.0039 | 2026-10-29 | Incus is a system container and virtual machine manager. In versions before 7.0.0, missing | |
CVE-2026-40243 |
low | 2.3 | 0.0017 | 2026-10-29 | Incus is a system container and virtual machine manager. In versions before 7.0.0, broken | |
CVE-2026-40251 |
high | 7.1 | 0.0041 | 2026-10-29 | Incus is a system container and virtual machine manager. In versions before 7.0.0, missing | |
CVE-2026-3291 |
medium | 6.9 | 0.0010 | 2026-10-29 | Samsung Print Service Plugin for Android is potentially vulnerable to information disclosu | |
CVE-2026-40296 |
medium | 5.4 | 0.0022 | 2026-10-29 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The HTML w | |
CVE-2026-41310 |
medium | 5.3 | 0.0031 | 2026-10-29 | OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1 | |
CVE-2026-41483 |
medium | 5.9 | 0.0032 | 2026-10-29 | OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments. In ver | |
CVE-2026-41484 |
medium | 5.9 | 0.0034 | 2026-10-29 | OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollec | |
CVE-2026-44597 |
critical | 9.1 | 0.0045 | 2026-10-29 | Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell | |
CVE-2026-40003 |
medium | 6.8 | 0.0030 | 2026-10-29 | ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via US | |
CVE-2026-44599 |
medium | 5.3 | 0.0029 | 2026-10-29 | Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008. | |
CVE-2026-44600 |
medium | 5.3 | 0.0038 | 2026-10-29 | Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clea | |
CVE-2026-40004 |
high | 7.8 | 0.0014 | 2026-10-29 | There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSma | |
CVE-2026-40981 |
— | — | 0.0043 | 2026-10-29 | When using Google Secrets Manager as a backend for the Spring Cloud Config server a client | |
CVE-2026-40982 |
— | — | 0.0073 | 2026-10-29 | Spring Cloud Config allows applications to serve arbitrary text and binary files through t | |
CVE-2026-41002 |
high | 8.1 | 0.0022 | 2026-10-29 | The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Con | |
CVE-2026-41004 |
medium | 4.4 | 0.0017 | 2026-10-29 | When enabling trace logging in Spring Cloud Config Server sensitive information was placed | |
CVE-2026-41142 |
— | — | 0.0044 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-41201 |
critical | 9.1 | 0.0033 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-41202 |
critical | 9.4 | 0.0068 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-41203 |
critical | 9.4 | 0.0062 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-41587 |
high | 8.6 | 0.0062 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-41890 |
medium | 6.9 | 0.0041 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-41891 |
medium | 5.3 | 0.0027 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-42216 |
high | 8.8 | 0.0046 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2006-2073 |
medium | 5.0 | 0.0813 | 2026-10-29 | Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service | |
CVE-2019-15598 |
critical | 9.8 | 0.0274 | 2026-10-29 | A Code Injection exists in treekill on Windows which allows a remote code execution when a | |
CVE-2019-5645 |
high | 7.5 | 0.4918 | 2026-10-29 | By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP hand | |
CVE-2020-21012 |
critical | 9.8 | 0.0350 | 2026-10-29 | Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL | |
CVE-2022-24513 |
high | 7.8 | 0.0077 | 2026-10-29 | Visual Studio Elevation of Privilege Vulnerability | |
CVE-2023-0606 |
medium | 6.1 | 0.0064 | 2026-10-29 | Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7 | |
CVE-2023-22839 |
high | 7.5 | 0.0063 | 2026-10-29 | On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, | |
CVE-2022-47762 |
high | 7.5 | 0.0093 | 2026-10-29 | In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability. | |
CVE-2023-0062 |
medium | 5.4 | 0.0057 | 2026-10-29 | The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of | |
CVE-2023-0697 |
medium | 6.5 | 0.0051 | 2026-10-29 | Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110. | |
CVE-2023-0698 |
high | 8.8 | 0.0065 | 2026-10-29 | Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote atta | |
CVE-2023-0704 |
medium | 6.5 | 0.0098 | 2026-10-29 | Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowe | |
CVE-2023-25166 |
medium | 6.5 | 0.0061 | 2026-10-29 | formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provi | |
CVE-2023-0251 |
high | 7.8 | 0.0030 | 2026-10-29 | Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflo | |
CVE-2023-0758 |
critical | 9.8 | 0.0061 | 2026-10-29 | A vulnerability was found in glorylion JFinalOA 1.0.2 and classified as critical. This iss | |
CVE-2023-0745 |
critical | 9.8 | 0.0051 | 2026-10-29 | The High Availability functionality of Yugabyte Anywhere can | |
CVE-2023-21435 |
medium | 5.5 | 0.0018 | 2026-10-29 | Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Re | |
CVE-2022-43552 |
medium | 5.9 | 0.0271 | 2026-10-29 | A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtu |