Browse All CVEs
33,082 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-5440 |
high | 7.5 | 0.0057 | 2026-10-29 | A memory exhaustion vulnerability exists in the HTTP server due to unbounded use of the `C | |
CVE-2026-5441 |
high | 7.1 | 0.0014 | 2026-10-29 | An out-of-bounds read vulnerability exists in the `DecodePsmctRle1` function of `DicomImag | |
CVE-2026-5442 |
critical | 9.8 | 0.0060 | 2026-10-29 | A heap buffer overflow vulnerability exists in the DICOM image decoder. Dimension fields a | |
CVE-2026-5443 |
critical | 9.8 | 0.0057 | 2026-10-29 | A heap buffer overflow vulnerability exists during the decoding of `PALETTE COLOR` DICOM i | |
CVE-2026-5444 |
high | 7.1 | 0.0016 | 2026-10-29 | A heap buffer overflow vulnerability exists in the PAM image parsing logic. When Orthanc p | |
CVE-2026-5445 |
critical | 9.1 | 0.0067 | 2026-10-29 | An out-of-bounds read vulnerability exists in the `DecodeLookupTable` function within `Dic | |
CVE-2026-5959 |
high | 7.5 | 0.0051 | 2026-10-29 | A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8 | |
CVE-2026-33005 |
medium | 4.3 | 0.0042 | 2026-10-29 | Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings. Any re | |
CVE-2026-33266 |
high | 7.5 | 0.0030 | 2026-10-29 | Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me | |
CVE-2026-34020 |
high | 7.5 | 0.0051 | 2026-10-29 | Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeeting | |
CVE-2026-35040 |
medium | 5.3 | 0.0038 | 2026-10-29 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.1, using certain | |
CVE-2026-35041 |
medium | 6.5 | 0.0026 | 2026-10-29 | fast-jwt provides fast JSON Web Token (JWT) implementation. From 5.0.0 to 6.2.0, a denial- | |
CVE-2026-39843 |
high | 7.7 | 0.0025 | 2026-10-29 | Plane is an an open-source project management tool. From 0.28.0 to before 1.3.0, the remed | |
CVE-2026-39853 |
high | 7.8 | 0.0016 | 2026-10-29 | osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.1 | |
CVE-2026-39941 |
medium | 5.3 | 0.0026 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an XSS vulnerability | |
CVE-2026-4878 |
high | 7.0 | 0.0020 | 2026-10-29 | A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time- | |
CVE-2026-5960 |
low | 2.1 | 0.0026 | 2026-10-29 | A weakness has been identified in code-projects Patient Record Management System 1.0. This | |
CVE-2026-39855 |
medium | 5.5 | 0.0014 | 2026-10-29 | osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.1 | |
CVE-2026-39856 |
medium | 5.5 | 0.0014 | 2026-10-29 | osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.1 | |
CVE-2026-39957 |
low | 2.3 | 0.0021 | 2026-10-29 | Lychee is a free, open-source photo-management tool. Prior to 7.5.4, a SQL operator-preced | |
CVE-2026-39958 |
medium | 5.2 | 0.0036 | 2026-10-29 | oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetch | |
CVE-2026-39959 |
high | 7.1 | 0.0012 | 2026-10-29 | Tmds.DBus provides .NET libraries for working with D-Bus from .NET. Tmds.DBus and Tmds.DBu | |
CVE-2026-39972 |
high | 7.1 | 0.0034 | 2026-10-29 | Mercure is a protocol for pushing data updates to web browsers and other HTTP clients in a | |
CVE-2026-39974 |
high | 8.5 | 0.0032 | 2026-10-29 | n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehe | |
CVE-2026-39976 |
high | 7.1 | 0.0029 | 2026-10-29 | Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, | |
CVE-2026-40046 |
high | 7.5 | 0.0037 | 2026-10-29 | Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apac | |
CVE-2026-5961 |
medium | 5.5 | 0.0026 | 2026-10-29 | A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0 | |
CVE-2026-5962 |
medium | 5.5 | 0.0054 | 2026-10-29 | A vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R | |
CVE-2026-1584 |
— | — | 0.0132 | 2026-10-29 | A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerabil | |
CVE-2026-35207 |
medium | 5.4 | 0.0015 | 2026-10-29 | dde-control-center is the control panel of DDE, the Deepin Desktop Environment. plugin-dee | |
CVE-2026-39315 |
medium | 6.1 | 0.0029 | 2026-10-29 | Unhead is a document head and template manager. Prior to 2.1.13, useHeadSafe() is the comp | |
CVE-2026-39911 |
high | 8.7 | 0.0054 | 2026-10-29 | Hashgraph Guardian through version 3.5.1, fixed in commit 45fbe2f, contains an unsandboxed | |
CVE-2026-39961 |
medium | 4.9 | 0.0040 | 2026-10-29 | Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes clus | |
CVE-2026-39981 |
high | 8.8 | 0.0132 | 2026-10-29 | AGiXT is a dynamic AI Agent Automation Platform. Prior to 1.9.2, the safe_join() function | |
CVE-2026-39983 |
— | — | 0.0219 | 2026-10-29 | basic-ftp is an FTP client for Node.js. Prior to 5.2.1, basic-ftp allows FTP command injec | |
CVE-2026-39985 |
medium | 6.1 | 0.0020 | 2026-10-29 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application t | |
CVE-2026-40069 |
high | 7.5 | 0.0027 | 2026-10-29 | BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.1.0 to before 0.8.2, BSV::Netw | |
CVE-2026-40070 |
high | 8.1 | 0.0014 | 2026-10-29 | BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.3.1 to before 0.8.2, BSV::Wall | |
CVE-2026-40072 |
low | 1.7 | 0.0023 | 2026-10-29 | web3.py allows you to interact with the Ethereum blockchain using Python. From 6.0.0b3 to | |
CVE-2026-5329 |
medium | 6.5 | 0.0046 | 2026-10-29 | Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerab | |
CVE-2026-5970 |
medium | 5.5 | 0.0039 | 2026-10-29 | A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the fun | |
CVE-2026-5971 |
medium | 5.5 | 0.0039 | 2026-10-29 | A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects | |
CVE-2026-34941 |
medium | 6.9 | 0.0038 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmti | |
CVE-2026-34942 |
medium | 5.9 | 0.0035 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmti | |
CVE-2026-34943 |
medium | 5.6 | 0.0032 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmti | |
CVE-2026-34944 |
medium | 4.1 | 0.0023 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, On x86 | |
CVE-2026-34945 |
low | 2.3 | 0.0032 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, W | |
CVE-2026-34946 |
medium | 5.9 | 0.0036 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, W | |
CVE-2026-34971 |
critical | 9.0 | 0.0032 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. From 32.0.0 to before 36.0.7, 42.0.2, and 43.0.1, W | |
CVE-2026-34983 |
low | 1.0 | 0.0012 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound an |