Browse All CVEs
33,080 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-34951 |
medium | 5.1 | 0.0015 | 2026-10-29 | Workbench is a suite of tools for administrators and developers to interact with Salesforc | |
CVE-2026-34969 |
low | 2.3 | 0.0027 | 2026-10-29 | Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth servi | |
CVE-2026-34982 |
— | — | 0.0044 | 2026-10-29 | Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline san | |
CVE-2026-5665 |
medium | 5.5 | 0.0032 | 2026-10-29 | A security vulnerability has been detected in code-projects Online FIR System 1.0. Affecte | |
CVE-2026-5666 |
medium | 5.5 | 0.0030 | 2026-10-29 | A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issu | |
CVE-2026-5704 |
medium | 5.5 | 0.0043 | 2026-10-29 | A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a | |
CVE-2026-34783 |
high | 8.1 | 0.0051 | 2026-10-29 | Ferret is a declarative system for working with web data. Prior to 2.0.0-alpha.4, a path t | |
CVE-2026-34841 |
critical | 9.8 | 0.0023 | 2026-10-29 | Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affe | |
CVE-2026-34975 |
medium | 4.3 | 0.0019 | 2026-10-29 | Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF hea | |
CVE-2026-34976 |
critical | 10.0 | 0.0207 | 2026-10-29 | Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant | |
CVE-2026-34977 |
critical | 9.3 | 0.0077 | 2026-10-29 | Aperi'Solve is an open-source steganalysis web platform. In versions 3.1.3 through 3.2.0, | |
CVE-2026-34981 |
medium | 5.8 | 0.0025 | 2026-10-29 | The whisperX API is a tool for enhancing and analyzing audio content. From 0.3.1 to 0.5.0, | |
CVE-2026-34986 |
— | — | 0.0065 | 2026-10-29 | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of | |
CVE-2026-34989 |
critical | 9.4 | 0.0030 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-35029 |
high | 8.7 | 0.3861 | 2026-10-29 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prio | |
CVE-2026-35030 |
critical | 9.4 | 0.0063 | 2026-10-29 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prio | |
CVE-2026-35035 |
critical | 9.0 | 0.0046 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-35036 |
high | 7.5 | 0.0033 | 2026-10-29 | Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior t | |
CVE-2026-35037 |
high | 7.2 | 0.0062 | 2026-10-29 | Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior t | |
CVE-2026-35039 |
critical | 9.1 | 0.0021 | 2026-10-29 | fast-jwt provides fast JSON Web Token (JWT) implementation. From 0.0.1 to before 6.2.0, se | |
CVE-2026-35042 |
high | 7.5 | 0.0015 | 2026-10-29 | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, fast-jwt | |
CVE-2026-5668 |
low | 1.9 | 0.0021 | 2026-10-29 | A flaw has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b29 | |
CVE-2026-5669 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability has been found in Cyber-III Student-Management-System up to 1a938fa61e9f73 | |
CVE-2026-5670 |
low | 2.1 | 0.0021 | 2026-10-29 | A vulnerability was found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e | |
CVE-2025-57835 |
high | 7.5 | 0.0028 | 2026-10-29 | An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem | |
CVE-2025-59440 |
high | 7.5 | 0.0028 | 2026-10-29 | An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem | |
CVE-2025-61166 |
medium | 6.1 | 0.0018 | 2026-10-29 | An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a | |
CVE-2026-30613 |
medium | 4.6 | 0.0017 | 2026-10-29 | An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/ | |
CVE-2026-35043 |
high | 7.8 | 0.0032 | 2026-10-29 | BentoML is a Python library for building online serving systems optimized for AI apps and | |
CVE-2026-35044 |
critical | 9.6 | 0.0039 | 2026-10-29 | BentoML is a Python library for building online serving systems optimized for AI apps and | |
CVE-2026-35045 |
high | 8.1 | 0.0027 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-35046 |
medium | 5.4 | 0.0017 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-35047 |
critical | 9.3 | 0.0055 | 2026-10-29 | Brave CMS is an open-source CMS. Prior to 2.0.6, an Unrestricted File Upload vulnerability | |
CVE-2026-35050 |
high | 8.8 | 0.0044 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35052 |
medium | 5.3 | 0.0062 | 2026-10-29 | D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pand | |
CVE-2026-35164 |
high | 8.8 | 0.0071 | 2026-10-29 | Brave CMS is an open-source CMS. Prior to 2.0.6, an unrestricted file upload vulnerability | |
CVE-2026-35166 |
medium | 5.3 | 0.0019 | 2026-10-29 | Hugo is a static site generator. From 0.60.0 to before 0.159.2, links and image links in t | |
CVE-2026-35167 |
high | 8.1 | 0.0033 | 2026-10-29 | Kedro is a toolbox for production-ready data science. Prior to 1.3.0, the _get_versioned_p | |
CVE-2026-0740 |
critical | 9.8 | 0.6290 | 2026-10-29 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file upload | |
CVE-2026-1839 |
high | 7.8 | 0.0038 | 2026-10-29 | A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` cla | |
CVE-2026-1114 |
critical | 9.8 | 0.0054 | 2026-10-29 | In parisneo/lollms version 2.1.0, the application's session management is vulnerable to im | |
CVE-2026-28810 |
medium | 6.3 | 0.0027 | 2026-10-29 | Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel (inet_ | |
CVE-2026-33227 |
medium | 4.3 | 0.0042 | 2026-10-29 | Improper validation and restriction of a classpath path name vulnerability in Apache Ac | |
CVE-2026-34197 |
— | — | 0.9826 | 2026-10-29 | KEV | Apache ActiveMQ contains an improper input validation vulnerability that allows for code i |
CVE-2026-34896 |
high | 7.5 | 0.0012 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming So | |
CVE-2026-34899 |
medium | 5.3 | 0.0024 | 2026-10-29 | Missing Authorization vulnerability in Eniture technology LTL Freight Quotes – Worldwide E | |
CVE-2026-34903 |
medium | 5.4 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in OceanWP Ocean Extra allows Exploiting Incorrectly C | |
CVE-2026-34904 |
high | 7.5 | 0.0012 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify Simple Social Media Share But | |
CVE-2026-22666 |
high | 8.6 | 0.1553 | 2026-10-29 | Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code execution v | |
CVE-2026-22679 |
critical | 9.3 | 0.2036 | 2026-10-29 | Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote |