Browse All CVEs
35,650 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-33703 |
high | 7.1 | 0.0017 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, an Insecure Direct Objec | |
CVE-2026-33704 |
high | 8.8 | 0.0042 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38, any authenticated user (inc | |
CVE-2026-33705 |
medium | 5.3 | 0.0024 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38, Twig template files (.tpl) | |
CVE-2026-33706 |
high | 7.1 | 0.0017 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38, any authenticated user with | |
CVE-2026-33707 |
critical | 9.8 | 0.0043 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, the default | |
CVE-2026-33708 |
medium | 6.5 | 0.0021 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38, the get_user_info_from_user | |
CVE-2026-33710 |
high | 7.5 | 0.0029 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, REST API key | |
CVE-2026-33736 |
medium | 6.5 | 0.0021 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, any authenticated user ( | |
CVE-2026-33737 |
medium | 6.5 | 0.0022 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, multiple fil | |
CVE-2026-3446 |
medium | 6.0 | 0.0019 | 2026-10-29 | When calling base64.b64decode() or related functions the decoding process would stop after | |
CVE-2026-40168 |
high | 8.2 | 0.0037 | 2026-10-29 | Postiz is an AI social media scheduling tool. Prior to 2.21.5, the /api/public/stream endp | |
CVE-2026-40180 |
high | 7.7 | 0.0039 | 2026-10-29 | Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server | |
CVE-2026-40184 |
medium | 5.3 | 0.0024 | 2026-10-29 | TREK is a collaborative travel planner. Prior to 2.7.2, TREK served uploaded photos withou | |
CVE-2026-40185 |
medium | 6.5 | 0.0021 | 2026-10-29 | TREK is a collaborative travel planner. Prior to 2.7.2, TREK was missing authorization che | |
CVE-2026-40188 |
high | 7.7 | 0.0032 | 2026-10-29 | goshs is a SimpleHTTPServer written in Go. From 1.0.7 to before 2.0.0-beta.4, the SFTP com | |
CVE-2026-40189 |
critical | 9.3 | 0.0064 | 2026-10-29 | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.4, goshs enforces the docum | |
CVE-2026-40190 |
critical | 9.8 | 0.0031 | 2026-10-29 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to | |
CVE-2026-40191 |
medium | 6.8 | 0.0011 | 2026-10-29 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access | |
CVE-2026-40242 |
medium | 6.5 | 0.0062 | 2026-10-29 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prio | |
CVE-2026-40252 |
medium | 5.3 | 0.0034 | 2026-10-29 | FastGPT is an AI Agent building platform. Prior to 4.14.10.4, Broken Access Control vulner | |
CVE-2026-33118 |
medium | 4.3 | 0.0056 | 2026-10-29 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium- | |
CVE-2026-33119 |
medium | 5.4 | 0.0031 | 2026-10-29 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium- | |
CVE-2026-40198 |
high | 7.5 | 0.0031 | 2026-10-29 | Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which ma | |
CVE-2026-40199 |
medium | 6.5 | 0.0031 | 2026-10-29 | Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which | |
CVE-2026-40354 |
medium | 6.3 | 0.0013 | 2026-10-29 | Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app t | |
CVE-2026-4149 |
critical | 9.8 | 0.0100 | 2026-10-29 | Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This | |
CVE-2026-4155 |
high | 7.5 | 0.0057 | 2026-10-29 | ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclo | |
CVE-2026-4156 |
high | 7.5 | 0.0043 | 2026-10-29 | ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulne | |
CVE-2026-4157 |
high | 7.5 | 0.0086 | 2026-10-29 | ChargePoint Home Flex revssh Service Command Injection Remote Code Execution Vulnerability | |
CVE-2026-5493 |
high | 7.8 | 0.0027 | 2026-10-29 | Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Executio | |
CVE-2026-5494 |
high | 7.8 | 0.0028 | 2026-10-29 | Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Executio | |
CVE-2026-5495 |
high | 7.8 | 0.0027 | 2026-10-29 | Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Executio | |
CVE-2026-5496 |
high | 7.8 | 0.0024 | 2026-10-29 | Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vul | |
CVE-2026-34621 |
high | 8.6 | 0.0723 | 2026-10-29 | KEV | Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbit |
CVE-2026-23900 |
medium | 6.5 | 0.0025 | 2026-10-29 | Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps com | |
CVE-2026-31845 |
critical | 9.3 | 0.0043 | 2026-10-29 | A reflected cross-site scripting (XSS) vulnerability exists in Rukovoditel CRM version 3.6 | |
CVE-2026-6105 |
medium | 5.5 | 0.0031 | 2026-10-29 | A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7. This aff | |
CVE-2026-6106 |
low | 2.0 | 0.0027 | 2026-10-29 | A vulnerability was detected in 1Panel-dev MaxKB up to 2.2.1. This vulnerability affects t | |
CVE-2026-6107 |
medium | 5.1 | 0.0021 | 2026-10-29 | A flaw has been found in 1Panel-dev MaxKB up to 2.6.1. This issue affects some unknown pro | |
CVE-2026-6108 |
low | 2.1 | 0.0145 | 2026-10-29 | A vulnerability was found in 1Panel-dev MaxKB up to 2.6.1. The affected element is the fun | |
CVE-2026-6109 |
low | 2.1 | 0.0022 | 2026-10-29 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The impacted eleme | |
CVE-2026-1116 |
medium | 6.1 | 0.0026 | 2026-10-29 | A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the | |
CVE-2026-6110 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1. This affects the f | |
CVE-2026-6111 |
low | 2.1 | 0.0026 | 2026-10-29 | A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts | |
CVE-2026-6112 |
high | 8.9 | 0.0177 | 2026-10-29 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the f | |
CVE-2026-6113 |
high | 8.9 | 0.0180 | 2026-10-29 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affec | |
CVE-2026-6114 |
high | 8.9 | 0.0180 | 2026-10-29 | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this is | |
CVE-2026-6115 |
high | 8.9 | 0.0182 | 2026-10-29 | A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function | |
CVE-2026-6116 |
high | 8.9 | 0.0180 | 2026-10-29 | A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerabilit | |
CVE-2026-6117 |
low | 2.1 | 0.0022 | 2026-10-29 | A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. This issue affects the func |