Browse All CVEs
13,225 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-115457 |
high | 7.1 | 0.0042 | 2026-10-29 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 befo | |
CVE-2026-115481 |
high | 8.5 | 0.0040 | 2026-10-29 | baserCMS is a website development framework. Starting in version 5.0.0-beta1 and prior to | |
CVE-2026-50053 |
high | 8.7 | 0.0030 | 2026-10-29 | A request attribute override vulnerability in Zimbra Collaboration Suite (ZCS) allows unau | |
CVE-2026-50056 |
high | 7.8 | 0.0034 | 2026-10-29 | A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collabo | |
CVE-2026-50057 |
high | 7.8 | 0.0027 | 2026-10-29 | A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA pac | |
CVE-2026-53918 |
high | 8.8 | 0.0062 | 2026-10-29 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to ve | |
CVE-2026-53920 |
high | 8.7 | 0.0040 | 2026-10-29 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From versio | |
CVE-2026-55826 |
high | 8.7 | 0.0034 | 2026-10-29 | The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websit | |
CVE-2026-93631 |
high | 7.1 | 0.0018 | 2026-10-29 | A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration | |
CVE-2026-93639 |
high | 8.7 | 0.0037 | 2026-10-29 | A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegat | |
CVE-2026-93640 |
high | 7.8 | 0.0012 | 2026-10-29 | A local privilege escalation vulnerability in the optional dnscache package of Zimbra Coll | |
CVE-2026-102786 |
high | 8.6 | 0.0026 | 2026-10-29 | Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attri | |
CVE-2026-106763 |
high | 7.5 | 0.0052 | 2026-10-29 | An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arb | |
CVE-2026-106764 |
high | 7.5 | 0.0052 | 2026-10-29 | An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code | |
CVE-2026-106765 |
high | 7.5 | 0.0050 | 2026-10-29 | An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary co | |
CVE-2026-115477 |
high | 7.1 | 0.0035 | 2026-10-29 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. | |
CVE-2026-115478 |
high | 7.1 | 0.0032 | 2026-10-29 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. | |
CVE-2026-39902 |
high | 7.2 | 0.0040 | 2026-10-29 | 1 PoC | Cacti is an open source performance and fault management framework. Prior to version 1.2.3 |
CVE-2026-54668 |
high | 8.7 | 0.0030 | 2026-10-29 | 1 PoC | Kitodo.Production is a workflow management tool for mass digitization and is part of the K |
CVE-2026-55457 |
high | 7.4 | 0.0027 | 2026-10-29 | The Goobi viewer is a web application that allows digitised material to be displayed in a | |
CVE-2026-55459 |
high | 7.4 | 0.0021 | 2026-10-29 | The Goobi viewer is a web application that allows digitised material to be displayed in a | |
CVE-2026-58497 |
high | 8.6 | 0.0026 | 2026-10-29 | Uni-CLI gives people and agents one command interface for websites, browsers, desktop appl | |
CVE-2025-45528 |
high | 7.3 | 0.0016 | 2026-10-29 | An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to | |
CVE-2026-50787 |
high | 7.5 | 0.0049 | 2026-10-29 | e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption v | |
CVE-2026-52356 |
high | 8.8 | 0.0210 | 2026-10-29 | An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link | |
CVE-2026-57845 |
high | 8.7 | 0.0055 | 2026-10-29 | 1 PoC | Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability tha |
CVE-2026-105482 |
high | 7.4 | 0.0047 | 2026-10-29 | A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently tru | |
CVE-2026-105483 |
high | 7.4 | 0.0030 | 2026-10-29 | A flaw in Node.js TLS hostname verification allows a certificate without a matching IP add | |
CVE-2026-106069 |
high | 7.4 | 0.0030 | 2026-10-29 | A flaw in Node.js TLS hostname verification can cause a server certificate to be validated | |
CVE-2026-87901 |
high | 8.3 | 0.0032 | 2026-10-29 | Improper sanitization in the registration module allows reflected Cross-Site Scripting. | |
CVE-2026-110975 |
high | 7.4 | 0.0025 | 2026-10-29 | A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, a | |
CVE-2026-115863 |
high | 7.6 | 0.0030 | 2026-10-29 | ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occ | |
CVE-2026-112342 |
high | 7.1 | 0.0027 | 2026-10-29 | Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/perm | |
CVE-2026-115570 |
high | 7.4 | 0.0038 | 2026-10-29 | Electron is a framework for writing cross-platform desktop applications using JavaScript, | |
CVE-2026-91093 |
high | 8.5 | 0.0016 | 2026-10-29 | A potential security vulnerability has been identified in HP One Agent for certain HP PC p | |
CVE-2026-115572 |
high | 7.1 | 0.0037 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can | |
CVE-2026-115580 |
high | 7.1 | 0.0041 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can | |
CVE-2026-115585 |
high | 7.1 | 0.0041 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an incomplete re | |
CVE-2026-115586 |
high | 7.1 | 0.0027 | 2026-10-29 | virtualenv is a tool for creating isolated virtual python environments. From 21.14.9 until | |
CVE-2026-19741 |
high | 7.5 | 0.0026 | 2026-10-29 | Zephyr's OpenThread integration defined CONFIG_OPENTHREAD_JOINER_PSKD with default "J01NME | |
CVE-2026-79977 |
high | 8.2 | 0.0020 | 2026-10-29 | The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from | |
CVE-2026-79979 |
high | 7.8 | 0.0010 | 2026-10-29 | The arm64 MMU backend invalidates a single virtual address from the TLB with invalidate_tl | |
CVE-2026-79982 |
high | 8.8 | 0.0023 | 2026-10-29 | The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/ | |
CVE-2026-115775 |
high | 8.7 | 0.0044 | 2026-10-29 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Pri | |
CVE-2026-115776 |
high | 7.5 | 0.0050 | 2026-10-29 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Pri | |
CVE-2026-115778 |
high | 7.5 | 0.0054 | 2026-10-29 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Pri | |
CVE-2026-58202 |
high | 8.3 | 0.0024 | 2026-10-29 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-65824 |
high | 7.4 | 0.0025 | 2026-10-29 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-65825 |
high | 7.5 | 0.0022 | 2026-10-29 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-115887 |
high | 7.5 | 0.0049 | 2026-10-29 | GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe Grap |