Browse All CVEs
34,737 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-34261 |
medium | 6.5 | 0.0021 | 2026-10-29 | Due to a missing authorization check in SAP Business Analytics and SAP Content Management, | |
CVE-2026-34262 |
medium | 4.3 | 0.0030 | 2026-10-29 | Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer | |
CVE-2026-34264 |
medium | 6.5 | 0.0027 | 2026-10-29 | During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system re | |
CVE-2026-39418 |
high | 7.4 | 0.0020 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, sandbox | |
CVE-2026-39420 |
high | 7.4 | 0.0049 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an incom | |
CVE-2026-39421 |
high | 7.4 | 0.0026 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sa | |
CVE-2026-39422 |
medium | 6.9 | 0.0022 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a St | |
CVE-2026-39423 |
medium | 6.9 | 0.0017 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an E | |
CVE-2026-39424 |
medium | 5.3 | 0.0037 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, the chat | |
CVE-2026-39419 |
low | 3.1 | 0.0022 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an authe | |
CVE-2026-39425 |
medium | 5.1 | 0.0018 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a St | |
CVE-2026-39426 |
medium | 5.1 | 0.0019 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a St | |
CVE-2026-6264 |
critical | 9.8 | 0.0074 | 2026-10-29 | A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated | |
CVE-2026-40287 |
high | 8.4 | 0.0025 | 2026-10-29 | PraisonAI is a multi-agent teams system. Versions 4.5.138 and below are vulnerable to arbi | |
CVE-2026-40288 |
critical | 9.8 | 0.0061 | 2026-10-29 | PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.14 | |
CVE-2026-40289 |
critical | 9.1 | 0.0042 | 2026-10-29 | PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.14 | |
CVE-2026-40313 |
critical | 9.1 | 0.0031 | 2026-10-29 | PraisonAI is a multi-agent teams system. In versions 4.5.139 and below, the GitHub Actions | |
CVE-2026-40315 |
high | 7.2 | 0.0030 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 4.5.133, there is an SQL identifier inje | |
CVE-2026-24032 |
medium | 6.9 | 0.0025 | 2026-10-29 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The a | |
CVE-2026-25654 |
high | 8.7 | 0.0045 | 2026-10-29 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3). Affected produ | |
CVE-2026-27668 |
high | 8.7 | 0.0026 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (S | |
CVE-2026-31908 |
critical | 9.1 | 0.0052 | 2026-10-29 | Header injection vulnerability in Apache APISIX. The attacker can take advantage of certa | |
CVE-2026-31923 |
high | 7.5 | 0.0025 | 2026-10-29 | Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. This can | |
CVE-2026-31924 |
medium | 5.3 | 0.0024 | 2026-10-29 | Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. tencent-c | |
CVE-2026-33892 |
medium | 5.1 | 0.0021 | 2026-10-29 | A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= | |
CVE-2026-33929 |
medium | 4.3 | 0.0071 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-24069 |
medium | 5.4 | 0.0019 | 2026-10-29 | Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, al | |
CVE-2026-2332 |
critical | 9.1 | 0.0131 | 2026-10-29 | In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extens | |
CVE-2026-2449 |
critical | 9.0 | 0.0033 | 2026-10-29 | Improper neutralization of argument delimiters in a command ('argument injection') vulnera | |
CVE-2026-2450 |
high | 7.4 | 0.0027 | 2026-10-29 | .NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper I | |
CVE-2026-30480 |
medium | 6.5 | 0.0027 | 2026-10-29 | A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS | |
CVE-2026-37980 |
medium | 4.8 | 0.0036 | 2026-10-29 | A flaw was found in Keycloak, specifically in the organization selection login page. A rem | |
CVE-2026-4344 |
high | 7.1 | 0.0020 | 2026-10-29 | A maliciously crafted HTML payload in a component name, when displayed during the delete c | |
CVE-2026-4345 |
high | 7.1 | 0.0020 | 2026-10-29 | A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigg | |
CVE-2026-4369 |
high | 7.1 | 0.0020 | 2026-10-29 | A maliciously crafted HTML payload in an assembly variant name, when displayed during the | |
CVE-2026-4913 |
medium | 5.7 | 0.0059 | 2026-10-29 | Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a r | |
CVE-2026-4914 |
medium | 5.4 | 0.0034 | 2026-10-29 | Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker t | |
CVE-2025-65136 |
medium | 6.1 | 0.0018 | 2026-10-29 | In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /st | |
CVE-2026-21741 |
medium | 4.8 | 0.0021 | 2026-10-29 | An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerabili | |
CVE-2026-21742 |
medium | 6.5 | 0.0015 | 2026-10-29 | A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS | |
CVE-2026-22154 |
medium | 5.4 | 0.0022 | 2026-10-29 | An improper neutralization of input during web page generation ('cross-site scripting') vu | |
CVE-2026-22155 |
high | 7.5 | 0.0017 | 2026-10-29 | A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS | |
CVE-2026-22573 |
medium | 6.5 | 0.0042 | 2026-10-29 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerab | |
CVE-2026-22574 |
medium | 6.5 | 0.0027 | 2026-10-29 | A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 | |
CVE-2026-22576 |
medium | 6.5 | 0.0026 | 2026-10-29 | A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 | |
CVE-2026-22828 |
high | 8.1 | 0.0090 | 2026-10-29 | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7 | |
CVE-2026-23708 |
high | 8.1 | 0.0028 | 2026-10-29 | A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, Fo | |
CVE-2026-25691 |
medium | 6.7 | 0.0046 | 2026-10-29 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerabi | |
CVE-2026-27316 |
low | 2.7 | 0.0031 | 2026-10-29 | A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 throug | |
CVE-2026-2399 |
medium | 6.9 | 0.0020 | 2026-10-29 | CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vuln |