Browse All CVEs
33,079 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-5638 |
medium | 5.5 | 0.0049 | 2026-10-29 | A vulnerability was detected in HerikLyma CPPWebFramework up to 3.1. This issue affects so | |
CVE-2026-5639 |
low | 2.1 | 0.0025 | 2026-10-29 | A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unk | |
CVE-2026-5640 |
low | 2.1 | 0.0019 | 2026-10-29 | A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affec | |
CVE-2026-5641 |
low | 2.1 | 0.0020 | 2026-10-29 | A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted e | |
CVE-2026-5642 |
medium | 5.5 | 0.0028 | 2026-10-29 | A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f73 | |
CVE-2026-5643 |
low | 1.9 | 0.0021 | 2026-10-29 | A vulnerability was identified in Cyber-III Student-Management-System up to 1a938fa61e9f73 | |
CVE-2026-5644 |
low | 1.9 | 0.0021 | 2026-10-29 | A security flaw has been discovered in Cyber-III Student-Management-System up to 1a938fa61 | |
CVE-2026-5673 |
high | 7.1 | 0.0018 | 2026-10-29 | A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists wit | |
CVE-2026-5645 |
medium | 5.5 | 0.0027 | 2026-10-29 | A weakness has been identified in projectworlds Car Rental System 1.0. Affected by this vu | |
CVE-2026-5646 |
medium | 5.5 | 0.0032 | 2026-10-29 | A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected b | |
CVE-2026-5647 |
low | 1.9 | 0.0021 | 2026-10-29 | A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unkno | |
CVE-2026-5648 |
medium | 5.5 | 0.0026 | 2026-10-29 | A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affec | |
CVE-2026-5649 |
low | 2.1 | 0.0025 | 2026-10-29 | A vulnerability has been found in code-projects Online Application System for Admission 1. | |
CVE-2026-5650 |
medium | 5.5 | 0.0031 | 2026-10-29 | A vulnerability was found in code-projects Online Application System for Admission 1.0. Im | |
CVE-2026-5659 |
low | 2.1 | 0.0026 | 2026-10-29 | A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the funct | |
CVE-2026-5660 |
low | 2.1 | 0.0019 | 2026-10-29 | A vulnerability was determined in itsourcecode Construction Management System 1.0. The imp | |
CVE-2026-25932 |
medium | 4.8 | 0.0028 | 2026-10-29 | GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an a | |
CVE-2026-26026 |
high | 7.2 | 0.1153 | 2026-10-29 | GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, tem | |
CVE-2026-29047 |
high | 8.8 | 0.0039 | 2026-10-29 | GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and | |
CVE-2026-33403 |
medium | 6.1 | 0.0019 | 2026-10-29 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and in | |
CVE-2026-33404 |
medium | 6.1 | 0.0014 | 2026-10-29 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and in | |
CVE-2026-33406 |
medium | 6.1 | 0.0025 | 2026-10-29 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and in | |
CVE-2026-34885 |
high | 8.5 | 0.0167 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-34897 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-5663 |
medium | 6.9 | 0.0189 | 2026-10-29 | A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function | |
CVE-2026-21367 |
high | 7.5 | 0.0020 | 2026-10-29 | Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action s | |
CVE-2026-21371 |
high | 7.8 | 0.0010 | 2026-10-29 | Memory Corruption when retrieving output buffer with insufficient size validation. | |
CVE-2026-21372 |
high | 7.8 | 0.0010 | 2026-10-29 | Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy oper | |
CVE-2026-21373 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when accessing an output buffer without validating its size during IOCTL | |
CVE-2026-21374 |
high | 7.8 | 0.0011 | 2026-10-29 | Memory Corruption when processing auxiliary sensor input/output control commands with insu | |
CVE-2026-21375 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when accessing an output buffer without validating its size during IOCTL | |
CVE-2026-21376 |
high | 7.8 | 0.0010 | 2026-10-29 | Memory Corruption when accessing an output buffer without validating its size during IOCTL | |
CVE-2026-21378 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when accessing an output buffer without validating its size during IOCTL | |
CVE-2026-21380 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory. | |
CVE-2026-21381 |
high | 7.5 | 0.0015 | 2026-10-29 | Transient DOS when receiving a service data frame with excessive length during device matc | |
CVE-2026-21382 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when handling power management requests with improperly sized input/outp | |
CVE-2026-33405 |
medium | 4.8 | 0.0017 | 2026-10-29 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and in | |
CVE-2026-33752 |
high | 8.6 | 0.0046 | 2026-10-29 | curl_cffi is the a Python binding for curl. Prior to 0.15.0, curl_cffi does not restrict r | |
CVE-2026-34148 |
high | 7.5 | 0.0055 | 2026-10-29 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. | |
CVE-2026-34208 |
critical | 10.0 | 0.0056 | 2026-10-29 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, SandboxJS blocks direct ass | |
CVE-2026-34211 |
medium | 6.9 | 0.0040 | 2026-10-29 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, the @nyariv/sandboxjs parse | |
CVE-2026-34217 |
medium | 6.9 | 0.0029 | 2026-10-29 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, a scope modification vulner | |
CVE-2026-34378 |
medium | 6.5 | 0.0026 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34379 |
— | — | 0.0028 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34380 |
medium | 5.9 | 0.0026 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34444 |
high | 7.9 | 0.0061 | 2026-10-29 | Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute | |
CVE-2026-34588 |
high | 8.6 | 0.0048 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34589 |
high | 8.4 | 0.0042 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34950 |
critical | 9.1 | 0.0024 | 2026-10-29 | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, the publ | |
CVE-2026-34951 |
medium | 5.1 | 0.0015 | 2026-10-29 | Workbench is a suite of tools for administrators and developers to interact with Salesforc |