Browse All CVEs
33,080 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-23818 |
critical | 9.6 | 0.0032 | 2026-10-29 | A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Net | |
CVE-2026-28808 |
high | 8.3 | 0.0056 | 2026-10-29 | Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated | |
CVE-2026-32144 |
high | 7.6 | 0.0020 | 2026-10-29 | Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module | |
CVE-2026-5731 |
— | — | 0.0034 | 2026-10-29 | Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 1 | |
CVE-2026-5732 |
— | — | 0.0035 | 2026-10-29 | Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vuln | |
CVE-2026-5733 |
— | — | 0.0030 | 2026-10-29 | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fi | |
CVE-2026-5734 |
critical | 9.8 | 0.0033 | 2026-10-29 | Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0. | |
CVE-2026-5735 |
critical | 9.8 | 0.0026 | 2026-10-29 | Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs | |
CVE-2026-35554 |
high | 8.7 | 0.0044 | 2026-10-29 | A race condition in the Apache Kafka Java producer client’s buffer pool management can cau | |
CVE-2026-5627 |
high | 7.2 | 0.0081 | 2026-10-29 | A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and inc | |
CVE-2025-62818 |
critical | 9.8 | 0.0046 | 2026-10-29 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos | |
CVE-2026-33033 |
medium | 6.5 | 0.0088 | 2026-10-29 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. `Mu | |
CVE-2026-33034 |
high | 7.5 | 0.0077 | 2026-10-29 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. ASG | |
CVE-2026-35480 |
medium | 6.2 | 0.0016 | 2026-10-29 | go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interface | |
CVE-2026-35483 |
medium | 5.3 | 0.0032 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35484 |
medium | 5.3 | 0.0032 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35485 |
high | 7.5 | 0.0068 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-3902 |
high | 7.5 | 0.0044 | 2026-10-29 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. `AS | |
CVE-2026-4277 |
critical | 9.8 | 0.0046 | 2026-10-29 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add | |
CVE-2026-4292 |
low | 2.7 | 0.0029 | 2026-10-29 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Adm | |
CVE-2026-4740 |
— | — | 0.0015 | 2026-10-29 | A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advan | |
CVE-2026-5372 |
medium | 6.4 | 0.0020 | 2026-10-29 | An issue that allowed a SQL injection attack vector related to saved queries (introduced i | |
CVE-2026-5373 |
high | 8.4 | 0.0022 | 2026-10-29 | An issue that allowed all-organization administrators to promote accounts to superuser sta | |
CVE-2026-5374 |
medium | 5.8 | 0.0021 | 2026-10-29 | An issue that allowed MCP agents to access remediation and asset information from outside | |
CVE-2026-5375 |
low | 2.7 | 0.0020 | 2026-10-29 | An issue that could allow a user with access to a credential to view sensitive fields thro | |
CVE-2026-5376 |
medium | 5.9 | 0.0021 | 2026-10-29 | An issue that could prevent session inactivity timeouts from triggering due to automatic p | |
CVE-2026-5378 |
medium | 6.8 | 0.0019 | 2026-10-29 | An issue that allowed administrators to create and update users outside of their authorize | |
CVE-2026-5379 |
low | 3.0 | 0.0012 | 2026-10-29 | An issue that allowed MCP agents to access certificate information from outside of their a | |
CVE-2026-5380 |
medium | 5.3 | 0.0020 | 2026-10-29 | An issue that could allow an authorized user to view the clear-text secrets for a subset o | |
CVE-2026-5381 |
low | 2.2 | 0.0017 | 2026-10-29 | An issue that could expose task information outside of the authorized organization scope h | |
CVE-2026-5382 |
low | 3.0 | 0.0017 | 2026-10-29 | An issue that could expose records outside of the authorized organization scope through th | |
CVE-2026-5383 |
medium | 4.4 | 0.0018 | 2026-10-29 | An issue that could allow access to Explorer groups from outside of the authorized organiz | |
CVE-2026-5384 |
medium | 5.8 | 0.0021 | 2026-10-29 | An issue that could allow a credential to be updated and used for a task from outside of t | |
CVE-2026-1078 |
high | 7.2 | 0.0032 | 2026-10-29 | An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic | |
CVE-2026-1079 |
medium | 6.0 | 0.0026 | 2026-10-29 | A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all | |
CVE-2026-33815 |
— | — | 0.0060 | 2026-10-29 | Memory-safety vulnerability in github.com/jackc/pgx/v5. | |
CVE-2026-33816 |
— | — | 0.0056 | 2026-10-29 | Memory-safety vulnerability in github.com/jackc/pgx/v5. | |
CVE-2026-35486 |
high | 7.5 | 0.0040 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35487 |
medium | 5.3 | 0.0026 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35488 |
high | 8.1 | 0.0038 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-35489 |
high | 7.3 | 0.0022 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-35490 |
critical | 9.8 | 0.0054 | 2026-10-29 | changedetection.io is a free open source web page change detection tool. Prior to 0.54.8, | |
CVE-2026-35491 |
medium | 6.1 | 0.0016 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35492 |
medium | 6.5 | 0.0043 | 2026-10-29 | Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDat | |
CVE-2026-35515 |
medium | 6.3 | 0.0023 | 2026-10-29 | Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1. | |
CVE-2026-35516 |
medium | 5.0 | 0.0027 | 2026-10-29 | LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository: | |
CVE-2026-35517 |
high | 8.8 | 0.0086 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35518 |
high | 8.8 | 0.0070 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35519 |
high | 8.8 | 0.0054 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35520 |
high | 8.8 | 0.0070 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' |