Browse All CVEs
31,824 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40044 |
critical | 9.3 | 0.0048 | 2026-10-29 | Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticated attacker | |
CVE-2026-6197 |
high | 7.4 | 0.0055 | 2026-10-29 | A flaw has been found in Tenda F456 1.0.0.5. This vulnerability affects the function formW | |
CVE-2026-6198 |
high | 7.4 | 0.0045 | 2026-10-29 | A vulnerability has been found in Tenda F456 1.0.0.5. This issue affects the function from | |
CVE-2026-6199 |
high | 7.4 | 0.0047 | 2026-10-29 | A vulnerability was found in Tenda F456 1.0.0.5. Impacted is the function fromqossetting o | |
CVE-2026-6200 |
high | 7.4 | 0.0045 | 2026-10-29 | A vulnerability was determined in Tenda F456 1.0.0.5. The affected element is the function | |
CVE-2026-32270 |
low | 1.7 | 0.0029 | 2026-10-29 | Craft Commerce is an ecommerce platform for Craft CMS. In versions 4.0.0 through 4.10.2 an | |
CVE-2026-32605 |
high | 7.5 | 0.0046 | 2026-10-29 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol base | |
CVE-2026-6201 |
low | 2.1 | 0.0033 | 2026-10-29 | A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is | |
CVE-2026-6202 |
low | 2.1 | 0.0020 | 2026-10-29 | A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an u | |
CVE-2026-32271 |
high | 7.7 | 0.0048 | 2026-10-29 | Craft Commerce is an ecommerce platform for Craft CMS. In versions 4.0.0 through 4.10.2 an | |
CVE-2026-32272 |
high | 8.7 | 0.0030 | 2026-10-29 | Craft Commerce is an ecommerce platform for Craft CMS. In versions 5.0.0 through 5.5.4, an | |
CVE-2026-6218 |
medium | 5.3 | 0.0028 | 2026-10-29 | A vulnerability was found in aandrew-me ytDownloader up to 3.20.2. Affected by this issue | |
CVE-2026-6219 |
low | 1.9 | 0.0102 | 2026-10-29 | A vulnerability was determined in aandrew-me ytDownloader up to 3.20.2. This affects the f | |
CVE-2026-33947 |
medium | 5.5 | 0.0023 | 2026-10-29 | jq is a command-line JSON processor. In versions 1.8.1 and below, functions jv_setpath(), | |
CVE-2026-4786 |
high | 7.0 | 0.0029 | 2026-10-29 | Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation c | |
CVE-2026-6224 |
medium | 5.5 | 0.0030 | 2026-10-29 | A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. T | |
CVE-2026-39956 |
medium | 6.1 | 0.0017 | 2026-10-29 | jq is a command-line JSON processor. Prior to version 1.8.2, the _strindices builtin in jq | |
CVE-2026-39979 |
medium | 6.9 | 0.0056 | 2026-10-29 | jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e | |
CVE-2026-5086 |
high | 7.5 | 0.0040 | 2026-10-29 | Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For | |
CVE-2026-0512 |
medium | 6.1 | 0.0023 | 2026-10-29 | Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Managem | |
CVE-2026-24318 |
medium | 4.2 | 0.0017 | 2026-10-29 | Due to an Insecure session management vulnerability in SAP Business Objects Business Intel | |
CVE-2026-27672 |
medium | 4.3 | 0.0017 | 2026-10-29 | The Material Master application does not enforce authorization checks for authenticated us | |
CVE-2026-27673 |
medium | 4.9 | 0.0016 | 2026-10-29 | Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an | |
CVE-2026-27674 |
medium | 6.1 | 0.0019 | 2026-10-29 | Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro | |
CVE-2026-27675 |
low | 2.0 | 0.0017 | 2026-10-29 | SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module th | |
CVE-2026-27676 |
medium | 4.3 | 0.0016 | 2026-10-29 | Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Technical Obj | |
CVE-2026-27677 |
medium | 6.5 | 0.0018 | 2026-10-29 | Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Reference Equ | |
CVE-2026-27678 |
medium | 6.5 | 0.0018 | 2026-10-29 | Due to missing authorization checks in the SAP S/4HANA backend OData Service (Manage Refer | |
CVE-2026-27679 |
medium | 6.5 | 0.0018 | 2026-10-29 | Due to missing authorization checks in the SAP S/4HANA frontend OData Service (Manage Refe | |
CVE-2026-27681 |
critical | 9.9 | 0.0050 | 2026-10-29 | Due to insufficient authorization checks in SAP Business Planning and Consolidation and SA | |
CVE-2026-27683 |
medium | 4.1 | 0.0019 | 2026-10-29 | SAP BusinessObjects Business Intelligence application allows an authenticated attacker to | |
CVE-2026-33948 |
low | 2.9 | 0.0026 | 2026-10-29 | jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a | |
CVE-2026-34069 |
medium | 5.3 | 0.0030 | 2026-10-29 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol base | |
CVE-2026-39417 |
medium | 5.5 | 0.0024 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an i | |
CVE-2026-40164 |
— | — | 0.0037 | 2026-10-29 | jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c78 | |
CVE-2026-34256 |
high | 7.1 | 0.0022 | 2026-10-29 | Due to a missing authorization check in SAP ERP and SAP S/4HANA (Private Cloud and On-Prem | |
CVE-2026-34257 |
medium | 6.1 | 0.0015 | 2026-10-29 | Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthe | |
CVE-2026-34261 |
medium | 6.5 | 0.0021 | 2026-10-29 | Due to a missing authorization check in SAP Business Analytics and SAP Content Management, | |
CVE-2026-34262 |
medium | 4.3 | 0.0030 | 2026-10-29 | Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer | |
CVE-2026-34264 |
medium | 6.5 | 0.0027 | 2026-10-29 | During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system re | |
CVE-2026-39418 |
high | 7.4 | 0.0020 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, sandbox | |
CVE-2026-39420 |
high | 7.4 | 0.0049 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an incom | |
CVE-2026-39421 |
high | 7.4 | 0.0026 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sa | |
CVE-2026-39422 |
medium | 6.9 | 0.0022 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a St | |
CVE-2026-39423 |
medium | 6.9 | 0.0017 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an E | |
CVE-2026-39424 |
medium | 5.3 | 0.0037 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, the chat | |
CVE-2026-39419 |
low | 3.1 | 0.0022 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an authe | |
CVE-2026-39425 |
medium | 5.1 | 0.0018 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a St | |
CVE-2026-39426 |
medium | 5.1 | 0.0019 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a St | |
CVE-2026-6264 |
critical | 9.8 | 0.0074 | 2026-10-29 | A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated |