Browse All CVEs
32,067 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-119718 |
high | 8.5 | — | 2026-10-30 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability c | |
CVE-2026-119719 |
high | 8.5 | — | 2026-10-30 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability i | |
CVE-2026-119716 |
critical | 9.2 | — | 2026-10-30 | pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that | |
CVE-2026-119717 |
critical | 9.2 | — | 2026-10-30 | pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that | |
CVE-2026-119714 |
medium | 6.9 | — | 2026-10-30 | My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerabil | |
CVE-2026-119715 |
medium | 5.3 | — | 2026-10-30 | NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to fr | |
CVE-2026-119712 |
medium | 5.3 | — | 2026-10-30 | PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser | |
CVE-2026-119713 |
high | 8.7 | — | 2026-10-30 | Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that | |
CVE-2026-119710 |
high | 7.1 | — | 2026-10-30 | PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows au | |
CVE-2026-119711 |
medium | 6.9 | — | 2026-10-30 | PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that al | |
CVE-2026-119708 |
high | 7.1 | — | 2026-10-30 | abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypass in the B | |
CVE-2026-119709 |
medium | 6.9 | — | 2026-10-30 | Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerabilit | |
CVE-2026-119706 |
critical | 9.3 | — | 2026-10-30 | InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution v | |
CVE-2026-119707 |
high | 7.1 | — | 2026-10-30 | SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collecti | |
CVE-2026-119704 |
medium | 5.3 | — | 2026-10-30 | Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh, rcp.sh and | |
CVE-2026-119705 |
medium | 6.9 | — | 2026-10-30 | SerpBear before 3.1.1 contains a missing authentication vulnerability in pages/api/notify. | |
CVE-2026-119702 |
medium | 6.9 | — | 2026-10-30 | WPGraphQL before 2.24.1 contains a missing authorization vulnerability in the createCommen | |
CVE-2026-119703 |
medium | 6.3 | — | 2026-10-30 | xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in WebS | |
CVE-2026-119700 |
medium | 6.9 | — | 2026-10-30 | WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unaut | |
CVE-2026-119701 |
medium | 6.9 | — | 2026-10-30 | WPGraphQL before 2.24.1 contains a missing rate limiting vulnerability that allows unauthe | |
CVE-2026-117184 |
— | — | — | 2026-10-30 | 1 PoC | An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denia |
CVE-2026-119699 |
medium | 6.9 | — | 2026-10-30 | WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerabi | |
CVE-2026-104067 |
high | 8.5 | — | 2026-10-30 | Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsv | |
CVE-2026-105456 |
medium | 5.3 | — | 2026-10-30 | RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the exten | |
CVE-2026-104065 |
high | 8.5 | — | 2026-10-30 | Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Microg | |
CVE-2026-104066 |
high | 8.5 | — | 2026-10-30 | Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image l | |
CVE-2026-104063 |
medium | 6.9 | — | 2026-10-30 | Scribus before 1.6.7 contains an out-of-bounds read vulnerability in the Mac PICT image lo | |
CVE-2026-104064 |
high | 8.5 | — | 2026-10-30 | Scribus before 1.6.7 contains an integer overflow vulnerability in the scimgdataloader_tif | |
CVE-2026-104061 |
high | 8.5 | — | 2026-10-30 | Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloa | |
CVE-2026-104062 |
high | 8.5 | — | 2026-10-30 | Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loade | |
CVE-2026-117349 |
— | — | — | 2026-10-30 | Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. | |
CVE-2026-119368 |
medium | 5.3 | — | 2026-10-30 | Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-even | |
CVE-2026-119482 |
medium | 5.3 | — | 2026-10-30 | Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exp | |
CVE-2026-46499 |
medium | 4.3 | — | 2026-10-30 | Collabora Online is a collaborative online office suite based on LibreOffice technology. P | |
CVE-2026-48164 |
medium | 4.7 | — | 2026-10-30 | Collabora Online is a collaborative online office suite based on LibreOffice technology. P | |
CVE-2026-61730 |
critical | 9.3 | — | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-45145 |
high | 7.5 | — | 2026-10-30 | Chamilo LMS is an open-source learning management system. Prior to 2.0.1, `public/main/inc | |
CVE-2026-61729 |
critical | 9.4 | — | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-45141 |
medium | 6.5 | — | 2026-10-30 | Chamilo LMS is an open-source learning management system. Prior to 2.0.1, the `add`, `dele | |
CVE-2026-45144 |
high | 8.9 | — | 2026-10-30 | Chamilo LMS is an open-source learning management system. From 2.0.0 until 2.0.1, `GET /us | |
CVE-2015-20130 |
medium | 5.1 | — | 2026-10-30 | Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting | |
CVE-2026-117346 |
— | — | — | 2026-10-30 | Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size | |
CVE-2010-20125 |
high | 8.7 | — | 2026-10-30 | DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that a | |
CVE-2026-61737 |
critical | 9.8 | — | 2026-10-30 | ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a ha | |
CVE-2026-61738 |
critical | 10.0 | — | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-44344 |
medium | 6.6 | — | 2026-10-30 | Chamilo LMS is an open-source learning management system. In the 1.x line before 1.11.40, | |
CVE-2026-65444 |
medium | 6.5 | — | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-116860 |
medium | 5.3 | — | 2026-10-30 | Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incor | |
CVE-2026-119370 |
medium | 6.5 | — | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-61739 |
high | 7.5 | — | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper |