Browse All CVEs
33,082 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-39331 |
high | 8.1 | 0.0021 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an authenticated API | |
CVE-2026-39332 |
high | 8.7 | 0.0020 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a reflected Cross-Si | |
CVE-2026-39333 |
high | 8.7 | 0.0022 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, he FindFundRaiser.ph | |
CVE-2026-39334 |
high | 8.8 | 0.0025 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vul | |
CVE-2026-39335 |
medium | 6.1 | 0.0025 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.1, there is Stored XSS | |
CVE-2026-39336 |
medium | 6.1 | 0.0021 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site | |
CVE-2026-39337 |
critical | 10.0 | 0.0072 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, critical pre-authent | |
CVE-2026-39338 |
high | 8.6 | 0.0022 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a Blind Reflected Cr | |
CVE-2026-39339 |
critical | 9.1 | 0.0135 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a critical authenti | |
CVE-2026-39340 |
high | 8.1 | 0.0023 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a SQL injection vuln | |
CVE-2026-39484 |
— | — | 0.0020 | 2026-10-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in John Darrel Hide My W | |
CVE-2026-39506 |
— | — | 0.0016 | 2026-10-29 | Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exp | |
CVE-2026-39526 |
— | — | 0.0023 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in wpstream WpStream wpstre | |
CVE-2026-39564 |
— | — | 0.0024 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunsh | |
CVE-2026-39572 |
— | — | 0.0019 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-5208 |
high | 7.2 | 0.0097 | 2026-10-29 | Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated at | |
CVE-2026-5300 |
critical | 9.1 | 0.0022 | 2026-10-29 | Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticat | |
CVE-2026-5301 |
medium | 6.1 | 0.0028 | 2026-10-29 | Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated a | |
CVE-2026-5302 |
high | 8.1 | 0.0026 | 2026-10-29 | CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote | |
CVE-2026-5838 |
low | 2.0 | 0.0020 | 2026-10-29 | A vulnerability was determined in PHPGurukul News Portal Project 4.1. This vulnerability a | |
CVE-2026-5839 |
low | 2.0 | 0.0020 | 2026-10-29 | A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects s | |
CVE-2026-5840 |
low | 2.0 | 0.0020 | 2026-10-29 | A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an | |
CVE-2026-5841 |
medium | 5.5 | 0.0063 | 2026-10-29 | A weakness has been identified in Tenda i3 1.0.0.6(2204). The affected element is the func | |
CVE-2026-5842 |
medium | 5.5 | 0.0039 | 2026-10-29 | A security vulnerability has been detected in decolua 9router up to 0.3.47. The impacted e | |
CVE-2026-5844 |
high | 7.3 | 0.0508 | 2026-10-29 | A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of t | |
CVE-2026-5847 |
low | 2.1 | 0.0026 | 2026-10-29 | A vulnerability has been found in code-projects Movie Ticketing System 1.0. Impacted is an | |
CVE-2026-5848 |
low | 2.0 | 0.0031 | 2026-10-29 | A vulnerability was found in jeecgboot JimuReport up to 2.3.0. The affected element is the | |
CVE-2026-5849 |
medium | 5.5 | 0.0063 | 2026-10-29 | A vulnerability was determined in Tenda i12 1.0.0.11(3862). The impacted element is an unk | |
CVE-2026-5850 |
high | 8.9 | 0.1510 | 2026-10-29 | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the | |
CVE-2026-5851 |
high | 8.9 | 0.1337 | 2026-10-29 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This impacts | |
CVE-2026-5852 |
high | 8.9 | 0.1351 | 2026-10-29 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the f | |
CVE-2026-5853 |
high | 8.9 | 0.1351 | 2026-10-29 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affec | |
CVE-2026-5854 |
high | 8.9 | 0.1661 | 2026-10-29 | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this is | |
CVE-2026-34177 |
critical | 9.1 | 0.0036 | 2026-10-29 | Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOpti | |
CVE-2026-34178 |
critical | 9.1 | 0.0042 | 2026-10-29 | In Canonical LXD before 6.8, the backup import path validates project restrictions against | |
CVE-2026-34179 |
critical | 9.1 | 0.0027 | 2026-10-29 | In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certif | |
CVE-2026-34184 |
high | 8.8 | 0.0029 | 2026-10-29 | AlanWeb SCADA does not enforce authorization for some directories. This allows an unauthor | |
CVE-2026-34185 |
high | 8.7 | 0.0029 | 2026-10-29 | AlanWeb SCADA is vulnerable to SQL Injection across most scripts and input parameters. Bec | |
CVE-2026-34538 |
medium | 6.5 | 0.0069 | 2026-10-29 | Apache Airflow versions 3.0.0 through 3.1.8 DagRun wait endpoint returns XCom result value | |
CVE-2026-4901 |
medium | 6.9 | 0.0026 | 2026-10-29 | AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials ar | |
CVE-2026-4660 |
— | — | 0.0058 | 2026-10-29 | HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file syst | |
CVE-2026-34578 |
high | 8.2 | 0.0042 | 2026-10-29 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.6, OPNsense's LDA | |
CVE-2026-34757 |
medium | 4.4 | 0.0019 | 2026-10-29 | LIBPNG is a reference library for use in applications that read, create, and manipulate PN | |
CVE-2026-4112 |
high | 7.2 | 0.0061 | 2026-10-29 | Improper neutralization of special elements used in an SQL command (“SQL Injection”) in So | |
CVE-2026-4113 |
high | 7.2 | 0.0036 | 2026-10-29 | An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliance | |
CVE-2026-4114 |
medium | 6.6 | 0.0060 | 2026-10-29 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remo | |
CVE-2026-4116 |
high | 7.2 | 0.0042 | 2026-10-29 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remo | |
CVE-2026-5437 |
high | 7.5 | 0.0064 | 2026-10-29 | An out-of-bounds read vulnerability exists in `DicomStreamReader` during DICOM meta-header | |
CVE-2026-5438 |
high | 7.5 | 0.0048 | 2026-10-29 | A gzip decompression bomb vulnerability exists when Orthanc processes HTTP request with `C | |
CVE-2026-5439 |
high | 7.5 | 0.0043 | 2026-10-29 | A memory exhaustion vulnerability exists in ZIP archive processing. Orthanc automatically |