Browse All CVEs
33,065 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-34571 |
critical | 9.0 | 0.0040 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34572 |
high | 8.8 | 0.0051 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-3987 |
high | 8.6 | 0.0069 | 2026-10-29 | A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may | |
CVE-2026-5313 |
low | 2.1 | 0.0029 | 2026-10-29 | A vulnerability has been found in Nothings stb up to 2.30. This issue affects the function | |
CVE-2026-32925 |
high | 8.4 | 0.0021 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CV7B | |
CVE-2026-32926 |
high | 8.4 | 0.0020 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFil | |
CVE-2026-32927 |
high | 8.4 | 0.0020 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInI | |
CVE-2026-32928 |
high | 8.4 | 0.0021 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSav | |
CVE-2026-32929 |
high | 8.4 | 0.0020 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_me | |
CVE-2026-5314 |
low | 2.1 | 0.0069 | 2026-10-29 | A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitF | |
CVE-2026-21765 |
high | 7.8 | 0.0010 | 2026-10-29 | HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. Th | |
CVE-2026-21767 |
low | 3.3 | 0.0012 | 2026-10-29 | HCL BigFix Platform is affected by insufficient authentication. The application might all | |
CVE-2026-5315 |
low | 2.1 | 0.0052 | 2026-10-29 | A vulnerability was determined in Nothings stb up to 1.26. The affected element is the fun | |
CVE-2026-5316 |
low | 2.1 | 0.0045 | 2026-10-29 | A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the fun | |
CVE-2026-1243 |
medium | 5.4 | 0.0021 | 2026-10-29 | IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This | |
CVE-2026-5317 |
low | 2.1 | 0.0043 | 2026-10-29 | A security flaw has been discovered in Nothings stb up to 1.22. This affects the function | |
CVE-2026-5319 |
low | 2.1 | 0.0034 | 2026-10-29 | A security vulnerability has been detected in itsourcecode Payroll Management System up to | |
CVE-2026-5322 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd | |
CVE-2026-5323 |
low | 1.9 | 0.0013 | 2026-10-29 | A vulnerability was found in priyankark a11y-mcp up to 1.0.5. This vulnerability affects t | |
CVE-2026-5325 |
low | 2.0 | 0.0020 | 2026-10-29 | A vulnerability was determined in SourceCodester Simple Customer Relationship Management S | |
CVE-2026-5244 |
medium | 5.5 | 0.0076 | 2026-10-29 | A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function m | |
CVE-2026-0634 |
high | 7.8 | 0.0053 | 2026-10-29 | Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps | |
CVE-2026-29131 |
medium | 4.9 | 0.0023 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially craf | |
CVE-2026-29132 |
medium | 6.3 | 0.0026 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a vi | |
CVE-2026-29133 |
medium | 5.3 | 0.0024 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys | |
CVE-2026-29134 |
medium | 5.3 | 0.0023 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA | |
CVE-2026-29135 |
medium | 5.3 | 0.0026 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password | |
CVE-2026-29136 |
medium | 5.3 | 0.0010 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into | |
CVE-2026-29137 |
medium | 5.3 | 0.0019 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security ta | |
CVE-2026-29138 |
medium | 6.3 | 0.0022 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially craf | |
CVE-2026-29139 |
high | 7.8 | 0.0028 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GIN | |
CVE-2026-29140 |
high | 7.7 | 0.0012 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-c | |
CVE-2026-29141 |
high | 7.7 | 0.0022 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject s | |
CVE-2026-29142 |
medium | 6.3 | 0.0013 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-enc | |
CVE-2026-29143 |
high | 7.8 | 0.0025 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inn | |
CVE-2026-29144 |
high | 7.8 | 0.0022 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject s | |
CVE-2026-33613 |
high | 8.8 | 0.0052 | 2026-10-29 | Due to the improper neutralisation of special elements used in an OS command, a remote att | |
CVE-2026-33614 |
high | 7.5 | 0.0034 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-33615 |
critical | 9.1 | 0.0042 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-33616 |
high | 7.5 | 0.0034 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated blind SQL Injection vuln | |
CVE-2026-33617 |
medium | 5.3 | 0.0027 | 2026-10-29 | An unauthenticated remote attacker can access a configuration file containing database cre | |
CVE-2026-5245 |
low | 2.9 | 0.0073 | 2026-10-29 | A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle | |
CVE-2026-5246 |
low | 2.9 | 0.0065 | 2026-10-29 | A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg | |
CVE-2026-32145 |
high | 8.7 | 0.0063 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allo | |
CVE-2026-5326 |
medium | 5.5 | 0.0042 | 2026-10-29 | A vulnerability was identified in SourceCodester Leave Application System 1.0. Impacted is | |
CVE-2026-5327 |
low | 2.1 | 0.0124 | 2026-10-29 | A security flaw has been discovered in efforthye fast-filesystem-mcp up to 3.5.1. The affe | |
CVE-2026-34890 |
medium | 6.5 | 0.0014 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-3872 |
— | — | 0.0045 | 2026-10-29 | A flaw was found in Keycloak. This issue allows an attacker, who controls another path on | |
CVE-2026-4282 |
— | — | 0.0043 | 2026-10-29 | A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks | |
CVE-2026-4325 |
medium | 5.3 | 0.0026 | 2026-10-29 | A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks |