Browse All CVEs
33,080 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-35186 |
medium | 6.1 | 0.0021 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, W | |
CVE-2026-35195 |
medium | 6.1 | 0.0022 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmti | |
CVE-2026-39912 |
critical | 9.1 | 0.0060 | 2026-10-29 | V2Board 1.6.1 through 1.7.4 and Xboard through 0.1.9 expose authentication tokens in HTTP | |
CVE-2026-24880 |
high | 7.5 | 0.0070 | 2026-10-29 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerabi | |
CVE-2026-25854 |
medium | 6.1 | 0.0053 | 2026-10-29 | Occasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tom | |
CVE-2026-29129 |
high | 7.5 | 0.0026 | 2026-10-29 | Configured cipher preference order not preserved vulnerability in Apache Tomcat. This iss | |
CVE-2026-29145 |
critical | 9.1 | 0.0072 | 2026-10-29 | CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is | |
CVE-2026-29146 |
— | — | 0.0885 | 2026-10-29 | Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configurat | |
CVE-2026-32990 |
medium | 5.3 | 0.0031 | 2026-10-29 | Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2 | |
CVE-2026-34483 |
high | 7.5 | 0.0046 | 2026-10-29 | Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component | |
CVE-2026-34486 |
— | — | 0.9850 | 2026-10-29 | KEV | Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows th |
CVE-2026-34487 |
high | 7.5 | 0.0045 | 2026-10-29 | Insertion of Sensitive Information into Log File vulnerability in the cloud membership for | |
CVE-2026-34500 |
medium | 6.5 | 0.0045 | 2026-10-29 | CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is | |
CVE-2026-34734 |
— | — | 0.0019 | 2026-10-29 | HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was fou | |
CVE-2026-35577 |
high | 8.1 | 0.0018 | 2026-10-29 | Apollo MCP Server is a Model Context Protocol server that exposes GraphQL operations as MC | |
CVE-2026-39977 |
high | 7.1 | 0.0029 | 2026-10-29 | flatpak-builder is a tool to build flatpaks from source. From 1.4.5 to before 1.4.8, the l | |
CVE-2026-40077 |
low | 3.1 | 0.0022 | 2026-10-29 | Beszel is a server monitoring platform. Prior to 0.18.7, some API endpoints in the Beszel | |
CVE-2026-40087 |
medium | 5.3 | 0.0026 | 2026-10-29 | LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.84 | |
CVE-2026-40088 |
critical | 9.6 | 0.0042 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 4.5.121, the execute_command function an | |
CVE-2026-40089 |
critical | 9.9 | 0.0023 | 2026-10-29 | Sonicverse is a Self-hosted Docker Compose stack for live radio streaming. The Sonicverse | |
CVE-2026-4436 |
high | 8.6 | 0.0045 | 2026-10-29 | A low-privileged remote attacker can send Modbus packets to manipulate register values th | |
CVE-2026-5972 |
medium | 5.5 | 0.0256 | 2026-10-29 | A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects | |
CVE-2026-5973 |
medium | 5.5 | 0.0251 | 2026-10-29 | A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the functio | |
CVE-2026-5974 |
medium | 6.9 | 0.0246 | 2026-10-29 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected eleme | |
CVE-2026-5975 |
high | 8.9 | 0.0180 | 2026-10-29 | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. The impacted elem | |
CVE-2026-5976 |
high | 8.9 | 0.0180 | 2026-10-29 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This affects | |
CVE-2026-40093 |
high | 8.1 | 0.0031 | 2026-10-29 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3 | |
CVE-2026-40109 |
low | 3.1 | 0.0013 | 2026-10-29 | Flux notification-controller is the event forwarder and notification dispatcher for the Gi | |
CVE-2026-5977 |
high | 8.9 | 0.0211 | 2026-10-29 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the | |
CVE-2026-5978 |
high | 8.9 | 0.0177 | 2026-10-29 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affec | |
CVE-2026-5979 |
high | 7.4 | 0.0069 | 2026-10-29 | A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is | |
CVE-2026-5980 |
high | 7.4 | 0.0068 | 2026-10-29 | A flaw has been found in D-Link DIR-605L 2.13B01. Affected by this issue is the function f | |
CVE-2026-21904 |
medium | 5.1 | 0.0021 | 2026-10-29 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vu | |
CVE-2026-21915 |
high | 8.4 | 0.0224 | 2026-10-29 | A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support In | |
CVE-2026-21916 |
high | 7.0 | 0.0013 | 2026-10-29 | A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Juno | |
CVE-2026-21919 |
high | 7.1 | 0.0023 | 2026-10-29 | An Incorrect Synchronization vulnerability in the management daemon (mgd) of Juniper Netwo | |
CVE-2026-33771 |
critical | 9.1 | 0.0026 | 2026-10-29 | A Weak Password Requirements vulnerability in the password management function of Juniper | |
CVE-2026-33773 |
medium | 6.9 | 0.0020 | 2026-10-29 | An Incorrect Initialization of Resource vulnerability in the packet forwarding engine (pfe | |
CVE-2026-33774 |
medium | 6.9 | 0.0017 | 2026-10-29 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwar | |
CVE-2026-33775 |
high | 7.1 | 0.0019 | 2026-10-29 | A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge s | |
CVE-2026-33776 |
medium | 6.8 | 0.0009 | 2026-10-29 | A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS | |
CVE-2026-33778 |
high | 8.7 | 0.0034 | 2026-10-29 | An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec libra | |
CVE-2026-33779 |
high | 8.3 | 0.0012 | 2026-10-29 | An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper | |
CVE-2026-33780 |
high | 7.1 | 0.0017 | 2026-10-29 | A Missing Release of Memory after Effective Lifetime vulnerability in the Layer 2 Address | |
CVE-2026-33781 |
high | 7.1 | 0.0016 | 2026-10-29 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwar | |
CVE-2026-33782 |
high | 8.7 | 0.0029 | 2026-10-29 | A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdh | |
CVE-2026-33783 |
high | 7.1 | 0.0024 | 2026-10-29 | A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juni | |
CVE-2026-33784 |
critical | 9.3 | 0.0046 | 2026-10-29 | A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) | |
CVE-2026-33785 |
medium | 6.3 | 0.0014 | 2026-10-29 | A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series | |
CVE-2026-33786 |
medium | 6.8 | 0.0009 | 2026-10-29 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis contr |