Browse All CVEs
35,650 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-5382 |
low | 3.0 | 0.0017 | 2026-10-29 | An issue that could expose records outside of the authorized organization scope through th | |
CVE-2026-5383 |
medium | 4.4 | 0.0018 | 2026-10-29 | An issue that could allow access to Explorer groups from outside of the authorized organiz | |
CVE-2026-5384 |
medium | 5.8 | 0.0021 | 2026-10-29 | An issue that could allow a credential to be updated and used for a task from outside of t | |
CVE-2026-1078 |
high | 7.2 | 0.0032 | 2026-10-29 | An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic | |
CVE-2026-1079 |
medium | 6.0 | 0.0026 | 2026-10-29 | A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all | |
CVE-2026-33815 |
— | — | 0.0060 | 2026-10-29 | Memory-safety vulnerability in github.com/jackc/pgx/v5. | |
CVE-2026-33816 |
— | — | 0.0056 | 2026-10-29 | Memory-safety vulnerability in github.com/jackc/pgx/v5. | |
CVE-2026-35486 |
high | 7.5 | 0.0040 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35487 |
medium | 5.3 | 0.0026 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35488 |
high | 8.1 | 0.0038 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-35489 |
high | 7.3 | 0.0022 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-35490 |
critical | 9.8 | 0.0054 | 2026-10-29 | changedetection.io is a free open source web page change detection tool. Prior to 0.54.8, | |
CVE-2026-35491 |
medium | 6.1 | 0.0016 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35492 |
medium | 6.5 | 0.0043 | 2026-10-29 | Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDat | |
CVE-2026-35515 |
medium | 6.3 | 0.0023 | 2026-10-29 | Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1. | |
CVE-2026-35516 |
medium | 5.0 | 0.0027 | 2026-10-29 | LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository: | |
CVE-2026-35517 |
high | 8.8 | 0.0086 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35518 |
high | 8.8 | 0.0070 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35519 |
high | 8.8 | 0.0054 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35520 |
high | 8.8 | 0.0070 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35521 |
high | 8.8 | 0.0069 | 2026-10-29 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole' | |
CVE-2026-35534 |
high | 7.6 | 0.0017 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site | |
CVE-2026-35571 |
medium | 4.8 | 0.0018 | 2026-10-29 | Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, Mustache navigation | |
CVE-2026-4931 |
high | 8.6 | 0.0026 | 2026-10-29 | Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large | |
CVE-2026-5745 |
medium | 5.5 | 0.0016 | 2026-10-29 | A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL | |
CVE-2026-22683 |
high | 8.7 | 0.0261 | 2026-10-29 | Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability tha | |
CVE-2026-23696 |
critical | 9.4 | 0.1358 | 2026-10-29 | Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vulnerability | |
CVE-2026-27314 |
high | 8.8 | 0.0026 | 2026-10-29 | Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthent | |
CVE-2026-27315 |
medium | 5.5 | 0.0016 | 2026-10-29 | Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive inf | |
CVE-2026-32588 |
medium | 6.5 | 0.0053 | 2026-10-29 | Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to | |
CVE-2026-35574 |
high | 8.7 | 0.0031 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 6.5.3, a stored Cross-Site | |
CVE-2026-35580 |
critical | 9.1 | 0.0057 | 2026-10-29 | Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workf | |
CVE-2026-35581 |
high | 7.2 | 0.0056 | 2026-10-29 | Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the Executrix utilit | |
CVE-2026-35583 |
medium | 5.3 | 0.0032 | 2026-10-29 | Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the configuration AP | |
CVE-2026-35608 |
medium | 5.3 | 0.0019 | 2026-10-29 | QuickDrop is an easy-to-use file sharing application. Prior to 1.5.3, a stored XSS vulnera | |
CVE-2026-35610 |
high | 8.8 | 0.0030 | 2026-10-29 | PolarLearn is a free and open-source learning program. In 0-PRERELEASE-14 and earlier, set | |
CVE-2026-35611 |
high | 7.5 | 0.0036 | 2026-10-29 | Addressable is an alternative implementation to the URI implementation that is part of Rub | |
CVE-2026-35613 |
medium | 4.7 | 0.0014 | 2026-10-29 | coursevault-preview is a utility for previewing course material files from a configured di | |
CVE-2026-35615 |
critical | 9.2 | 0.0042 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, _validate_path() calls os.path. | |
CVE-2026-39305 |
critical | 10.0 | 0.0031 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, the Action Orchestrator feature | |
CVE-2026-39306 |
high | 7.3 | 0.0029 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, PraisonAI's recipe registry pul | |
CVE-2026-39307 |
high | 8.1 | 0.0031 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, The PraisonAI templates install | |
CVE-2026-39308 |
high | 7.1 | 0.0033 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, PraisonAI's recipe registry pub | |
CVE-2026-39314 |
medium | 6.2 | 0.0015 | 2026-10-29 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operatin | |
CVE-2026-39316 |
medium | 6.2 | 0.0018 | 2026-10-29 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operatin | |
CVE-2026-4631 |
— | — | 0.1548 | 2026-10-29 | Cockpit's remote login feature passes user-supplied hostnames and usernames from the web i | |
CVE-2026-22680 |
medium | 6.9 | 0.0038 | 2026-10-29 | OpenViking versions prior to 0.3.3 contain a missing authorization vulnerability in the ta | |
CVE-2026-22682 |
high | 8.4 | 0.0013 | 2026-10-29 | OpenHarness prior to commit 166fcfe contains an improper access control vulnerability in b | |
CVE-2026-24146 |
high | 7.5 | 0.0053 | 2026-10-29 | NVIDIA Triton Inference Server contains a vulnerability where insufficient input validatio | |
CVE-2026-24147 |
medium | 4.8 | 0.0048 | 2026-10-29 | NVIDIA Triton Inference Server contains a vulnerability in triton server where an attacker |