Browse All CVEs
37,811 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-39305 |
critical | 10.0 | 0.0032 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, the Action Orchestrator feature | |
CVE-2026-39306 |
high | 7.3 | 0.0030 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, PraisonAI's recipe registry pul | |
CVE-2026-39307 |
high | 8.1 | 0.0033 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, The PraisonAI templates install | |
CVE-2026-39308 |
high | 7.1 | 0.0034 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, PraisonAI's recipe registry pub | |
CVE-2026-39314 |
medium | 6.2 | 0.0016 | 2026-10-29 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operatin | |
CVE-2026-39316 |
medium | 6.2 | 0.0018 | 2026-10-29 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operatin | |
CVE-2026-4631 |
critical | 9.8 | 0.1548 | 2026-10-29 | 2 PoC | Cockpit's remote login feature passes user-supplied hostnames and usernames from the web i |
CVE-2026-22680 |
medium | 6.9 | 0.0040 | 2026-10-29 | OpenViking versions prior to 0.3.3 contain a missing authorization vulnerability in the ta | |
CVE-2026-22682 |
high | 8.4 | 0.0013 | 2026-10-29 | OpenHarness prior to commit 166fcfe contains an improper access control vulnerability in b | |
CVE-2026-24146 |
high | 7.5 | 0.0054 | 2026-10-29 | NVIDIA Triton Inference Server contains a vulnerability where insufficient input validatio | |
CVE-2026-24147 |
medium | 4.8 | 0.0050 | 2026-10-29 | NVIDIA Triton Inference Server contains a vulnerability in triton server where an attacker | |
CVE-2026-24156 |
high | 7.3 | 0.0027 | 2026-10-29 | NVIDIA DALI contains a vulnerability where an attacker could cause a deserialization of un | |
CVE-2026-24173 |
high | 7.5 | 0.0054 | 2026-10-29 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a se | |
CVE-2026-24174 |
high | 7.5 | 0.0054 | 2026-10-29 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a se | |
CVE-2026-24175 |
high | 7.5 | 0.0049 | 2026-10-29 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a se | |
CVE-2026-35572 |
high | 7.0 | 0.0031 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 6.5.3, it is possible to tr | |
CVE-2026-35573 |
critical | 9.1 | 0.0080 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 6.5.3, a path traversal vul | |
CVE-2026-35575 |
high | 8.0 | 0.0025 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 6.5.3, a Stored Cross-Site | |
CVE-2026-35576 |
high | 8.7 | 0.0027 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.0.0, a stored cross-site | |
CVE-2026-39318 |
high | 8.8 | 0.0035 | 2026-10-29 | ChurchCRM is an open-source church management system. Versions prior to 7.1.0 have an SQL | |
CVE-2026-39319 |
high | 8.8 | 0.0025 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a second order SQL i | |
CVE-2026-39321 |
medium | 6.3 | 0.0024 | 2026-10-29 | Parse Server is an open source backend that can be deployed to any infrastructure that can | |
CVE-2026-39324 |
critical | 9.3 | 0.0027 | 2026-10-29 | Rack::Session is a session management implementation for Rack. From 2.0.0 to before 2.1.2, | |
CVE-2026-39325 |
high | 7.2 | 0.0026 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vul | |
CVE-2026-39326 |
high | 8.8 | 0.0025 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vul | |
CVE-2026-39327 |
high | 8.8 | 0.0025 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vul | |
CVE-2026-39328 |
high | 8.9 | 0.0021 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site | |
CVE-2026-39329 |
high | 8.8 | 0.0025 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vul | |
CVE-2026-39330 |
high | 8.8 | 0.0025 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vul | |
CVE-2026-39331 |
high | 8.1 | 0.0022 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an authenticated API | |
CVE-2026-39332 |
high | 8.7 | 0.0021 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a reflected Cross-Si | |
CVE-2026-39333 |
high | 8.7 | 0.0022 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, he FindFundRaiser.ph | |
CVE-2026-39334 |
high | 8.8 | 0.0026 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vul | |
CVE-2026-39335 |
medium | 6.1 | 0.0026 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.1, there is Stored XSS | |
CVE-2026-39336 |
medium | 6.1 | 0.0022 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site | |
CVE-2026-39337 |
critical | 10.0 | 0.0073 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, critical pre-authent | |
CVE-2026-39338 |
high | 8.6 | 0.0023 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a Blind Reflected Cr | |
CVE-2026-39339 |
critical | 9.1 | 0.0135 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a critical authenti | |
CVE-2026-39340 |
high | 8.1 | 0.0023 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a SQL injection vuln | |
CVE-2026-39484 |
— | — | 0.0021 | 2026-10-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in John Darrel Hide My W | |
CVE-2026-39506 |
— | — | 0.0017 | 2026-10-29 | Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exp | |
CVE-2026-39526 |
— | — | 0.0024 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in wpstream WpStream wpstre | |
CVE-2026-39564 |
— | — | 0.0025 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunsh | |
CVE-2026-39572 |
— | — | 0.0020 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-5208 |
high | 7.2 | 0.0099 | 2026-10-29 | Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated at | |
CVE-2026-5300 |
critical | 9.1 | 0.0022 | 2026-10-29 | Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticat | |
CVE-2026-5301 |
medium | 6.1 | 0.0028 | 2026-10-29 | Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated a | |
CVE-2026-5302 |
high | 8.1 | 0.0027 | 2026-10-29 | CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote | |
CVE-2026-5838 |
low | 2.0 | 0.0020 | 2026-10-29 | A vulnerability was determined in PHPGurukul News Portal Project 4.1. This vulnerability a | |
CVE-2026-5839 |
low | 2.0 | 0.0020 | 2026-10-29 | A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects s |