Browse All CVEs
39,464 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-4968 |
low | 2.1 | 0.0020 | 2026-10-29 | A vulnerability was determined in SourceCodester Diary App 1.0. The affected element is an | |
CVE-2026-26060 |
medium | 6.0 | 0.0035 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.0, a vulnerability in Fleet | |
CVE-2026-26061 |
high | 8.7 | 0.0045 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.0, Fleet contained multiple | |
CVE-2026-29180 |
medium | 4.9 | 0.0033 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.1, a broken access control | |
CVE-2026-34369 |
medium | 5.3 | 0.0039 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `g | |
CVE-2026-34374 |
critical | 9.1 | 0.0036 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `L | |
CVE-2026-34375 |
high | 8.2 | 0.0030 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the YP | |
CVE-2026-34385 |
medium | 6.2 | 0.0021 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injec | |
CVE-2026-34386 |
medium | 6.3 | 0.0033 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.0, a SQL injection vulnerab | |
CVE-2026-34387 |
medium | 5.7 | 0.0133 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.1, a command injection vuln | |
CVE-2026-4969 |
low | 2.0 | 0.0020 | 2026-10-29 | A vulnerability was identified in code-projects Social Networking Site 1.0. The impacted e | |
CVE-2026-4970 |
low | 2.1 | 0.0020 | 2026-10-29 | A security flaw has been discovered in code-projects Social Networking Site 1.0. This affe | |
CVE-2026-31943 |
high | 8.5 | 0.0022 | 2026-10-29 | LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.3, `isPrivateI | |
CVE-2026-31945 |
high | 7.7 | 0.0026 | 2026-10-29 | LibreChat is a ChatGPT clone with additional features. Versions 0.8.2-rc2 through 0.8.2 ar | |
CVE-2026-31950 |
medium | 5.3 | 0.0022 | 2026-10-29 | LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc2 through 0.8.2 | |
CVE-2026-31951 |
medium | 5.7 | 0.0025 | 2026-10-29 | LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc1 through 0.8.3 | |
CVE-2026-33044 |
high | 7.3 | 0.0023 | 2026-10-29 | Home Assistant is open source home automation software that puts local control and privacy | |
CVE-2026-33045 |
high | 7.3 | 0.0021 | 2026-10-29 | Home Assistant is open source home automation software that puts local control and privacy | |
CVE-2026-33654 |
high | 8.9 | 0.0051 | 2026-10-29 | nanobot is a personal AI assistant. Prior to version 0.1.6, an indirect prompt injection v | |
CVE-2026-33765 |
high | 8.9 | 0.0130 | 2026-10-29 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and in | |
CVE-2026-33872 |
high | 7.1 | 0.0040 | 2026-10-29 | elixir-nodejs provides an Elixir API for calling Node.js functions. A vulnerability in ver | |
CVE-2026-34205 |
critical | 9.6 | 0.0027 | 2026-10-29 | Home Assistant is open source home automation software that puts local control and privacy | |
CVE-2026-34388 |
medium | 6.6 | 0.0027 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.0, a denial-of-service vuln | |
CVE-2026-34389 |
medium | 4.9 | 0.0019 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.0, Fleet contained an issue | |
CVE-2026-34391 |
medium | 6.6 | 0.0017 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet | |
CVE-2026-34475 |
critical | 9.8 | 0.0021 | 2026-10-29 | Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked r | |
CVE-2026-4971 |
low | 2.1 | 0.0016 | 2026-10-29 | A weakness has been identified in SourceCodester Note Taking App up to 1.0. This impacts a | |
CVE-2026-4972 |
low | 1.9 | 0.0021 | 2026-10-29 | A security vulnerability has been detected in code-projects Online Reviewer System up to 1 | |
CVE-2026-4973 |
low | 2.0 | 0.0025 | 2026-10-29 | A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by t | |
CVE-2026-4974 |
high | 7.4 | 0.0064 | 2026-10-29 | A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fro | |
CVE-2026-4975 |
high | 7.4 | 0.0064 | 2026-10-29 | A vulnerability has been found in Tenda AC15 15.03.05.19. This affects the function formSe | |
CVE-2026-33874 |
high | 7.8 | 0.0029 | 2026-10-29 | Gematik Authenticator securely authenticates users for login to digital health application | |
CVE-2026-33875 |
critical | 9.3 | 0.0027 | 2026-10-29 | Gematik Authenticator securely authenticates users for login to digital health application | |
CVE-2026-33879 |
low | 2.7 | 0.0028 | 2026-10-29 | Federated Learning and Interoperability Platform (FLIP) is an open-source platform for fed | |
CVE-2026-33882 |
medium | 6.5 | 0.0027 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5 | |
CVE-2026-33883 |
medium | 6.1 | 0.0015 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5 | |
CVE-2026-33884 |
medium | 4.3 | 0.0017 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5 | |
CVE-2026-33885 |
medium | 6.1 | 0.0018 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5 | |
CVE-2026-33886 |
medium | 6.5 | 0.0023 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Starting in version | |
CVE-2026-33887 |
medium | 5.4 | 0.0015 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5 | |
CVE-2026-33891 |
— | — | 0.0061 | 2026-10-29 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in | |
CVE-2026-33894 |
— | — | 0.0048 | 2026-10-29 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in | |
CVE-2026-33895 |
— | — | 0.0053 | 2026-10-29 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in | |
CVE-2026-33896 |
critical | 9.1 | 0.0036 | 2026-10-29 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in | |
CVE-2026-33903 |
medium | 6.5 | 0.0022 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when p | |
CVE-2026-33904 |
medium | 6.5 | 0.0017 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, a deadlock i | |
CVE-2026-33906 |
high | 7.2 | 0.0040 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, the NetworkM | |
CVE-2026-33907 |
medium | 6.5 | 0.0025 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when p | |
CVE-2026-33916 |
medium | 4.7 | 0.0028 | 2026-10-29 | Handlebars provides the power necessary to let users build semantic templates. In versions | |
CVE-2026-33937 |
— | — | 0.0191 | 2026-10-29 | Handlebars provides the power necessary to let users build semantic templates. In versions |