Browse All CVEs
13,224 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-30045 |
high | 8.6 | 0.0020 | 2026-10-29 | CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Per | |
CVE-2025-30049 |
high | 8.2 | 0.0021 | 2026-10-29 | The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue wa | |
CVE-2025-30052 |
high | 8.8 | 0.0034 | 2026-10-29 | The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoof | |
CVE-2026-112359 |
high | 7.5 | 0.0032 | 2026-10-29 | Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting | |
CVE-2026-112835 |
high | 7.1 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-112837 |
high | 8.5 | 0.0031 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-112838 |
high | 7.1 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-16762 |
high | 8.7 | 0.0052 | 2026-10-29 | An attacker able to supply a crafted XML document to an application using QXmlStreamReader | |
CVE-2026-25716 |
high | 7.1 | 0.0018 | 2026-10-29 | Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceUser | |
CVE-2026-89320 |
high | 8.8 | 0.0017 | 2026-10-29 | `HmacShaCryptor.Hash` never hashed its input. For any input it returned `HMAC_K("")` — the | |
CVE-2026-112904 |
high | 8.7 | 0.0049 | 2026-10-29 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-115723 |
high | 8.3 | 0.0042 | 2026-10-29 | Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner t | |
CVE-2026-115726 |
high | 8.5 | 0.0028 | 2026-10-29 | Aider through 0.86.2 contains a command execution vulnerability that allows attackers to r | |
CVE-2026-56832 |
high | 8.8 | 0.0015 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, prai | |
CVE-2026-56833 |
high | 7.5 | 0.0046 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, Prai | |
CVE-2026-56834 |
high | 7.5 | 0.0037 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, Prai | |
CVE-2026-56835 |
high | 8.3 | 0.0022 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 3.11.0 to before version 4.6.59, Pra | |
CVE-2026-56836 |
high | 8.2 | 0.0033 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, Pr | |
CVE-2026-56837 |
high | 8.6 | 0.0019 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 4.6.56 to before version 4.6.59, Pra | |
CVE-2026-56838 |
high | 7.8 | 0.0015 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.59, Pra | |
CVE-2026-56840 |
high | 8.8 | 0.0037 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, prai | |
CVE-2026-98870 |
high | 8.8 | 0.0054 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale c | |
CVE-2026-98889 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: f | |
CVE-2026-98895 |
high | 7.0 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Handle | |
CVE-2026-98899 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mar | |
CVE-2026-98911 |
high | 7.5 | 0.0032 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the | |
CVE-2026-112849 |
high | 7.1 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-112850 |
high | 8.1 | 0.0034 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-112852 |
high | 8.1 | 0.0026 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion allows Obj | |
CVE-2026-112863 |
high | 7.1 | 0.0015 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115728 |
high | 8.7 | 0.0047 | 2026-10-29 | @hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of service vuln | |
CVE-2026-115729 |
high | 8.9 | 0.0044 | 2026-10-29 | @pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerabilit | |
CVE-2026-55888 |
high | 8.8 | 0.0038 | 2026-10-29 | XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious san | |
CVE-2026-55889 |
high | 8.3 | 0.0034 | 2026-10-29 | XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious san | |
CVE-2026-57113 |
high | 8.1 | 0.0040 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 2.6.0 to before version 4.6.59, Prai | |
CVE-2026-57114 |
high | 7.2 | 0.0026 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, Pr | |
CVE-2026-57117 |
high | 8.8 | 0.0058 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4.6.59, Loc | |
CVE-2026-57121 |
high | 8.1 | 0.0033 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in pra | |
CVE-2026-57142 |
high | 7.8 | 0.0024 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.61, Pra | |
CVE-2026-57144 |
high | 8.8 | 0.0021 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 4.5.110 to before version 4.6.61, pr | |
CVE-2026-57146 |
high | 7.5 | 0.0049 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, th | |
CVE-2026-57209 |
high | 7.0 | 0.0049 | 2026-10-29 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior | |
CVE-2026-57210 |
high | 7.0 | 0.0031 | 2026-10-29 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior | |
CVE-2026-63120 |
high | 8.4 | 0.0040 | 2026-10-29 | pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud | |
CVE-2026-98927 |
high | 7.0 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix l | |
CVE-2026-98932 |
high | 7.4 | 0.0018 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Fix use- | |
CVE-2026-98941 |
high | 7.0 | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable la | |
CVE-2026-98944 |
high | 7.8 | 0.0018 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor | |
CVE-2026-98945 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange | |
CVE-2026-98952 |
high | 7.3 | 0.0038 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: pfcp: make sure the S |