Browse All CVEs
34,099 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-119562 |
low | 2.3 | 0.0018 | 2026-10-30 | phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated | |
CVE-2026-119563 |
medium | 5.1 | 0.0017 | 2026-10-30 | phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows | |
CVE-2026-119560 |
medium | 6.0 | 0.0034 | 2026-10-30 | OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows | |
CVE-2026-119561 |
high | 7.6 | 0.0019 | 2026-10-30 | phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer:: | |
CVE-2026-119558 |
low | 2.3 | 0.0020 | 2026-10-30 | OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in cus | |
CVE-2026-119559 |
high | 8.2 | 0.0029 | 2026-10-30 | OpenLiteSpeed through 1.9.4 contains an authentication bypass vulnerability that allows un | |
CVE-2026-119556 |
medium | 5.3 | 0.0029 | 2026-10-30 | Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2. | |
CVE-2026-119557 |
high | 8.2 | 0.0049 | 2026-10-30 | n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks n | |
CVE-2026-119554 |
medium | 6.0 | 0.0022 | 2026-10-30 | Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through | |
CVE-2026-119555 |
medium | 5.3 | 0.0022 | 2026-10-30 | Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2. | |
CVE-2026-119552 |
medium | 6.3 | 0.0023 | 2026-10-30 | Uptime Kuma through 2.5.8 contains a race condition in the Socket.IO first-run setup handl | |
CVE-2026-119553 |
high | 7.1 | 0.0042 | 2026-10-30 | Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through | |
CVE-2026-119550 |
medium | 5.1 | 0.0022 | 2026-10-30 | Jellyfin through 12.4 contains an information disclosure vulnerability in PlaylistsControl | |
CVE-2026-119551 |
high | 7.1 | 0.0032 | 2026-10-30 | Jellyfin through 12.4 contains an authorization bypass vulnerability in SuggestionsControl | |
CVE-2026-119548 |
low | 2.3 | 0.0031 | 2026-10-30 | Lago through 1.55.0 contains an authorization bypass vulnerability in Invoices::Payments:: | |
CVE-2026-119549 |
high | 7.1 | 0.0044 | 2026-10-30 | Jellyfin through 12.4 contains a server-side request forgery vulnerability that lets authe | |
CVE-2026-119546 |
medium | 6.8 | 0.0015 | 2026-10-30 | Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a path | |
CVE-2026-119547 |
medium | 5.3 | 0.0025 | 2026-10-30 | Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains an info | |
CVE-2026-119429 |
medium | 5.3 | 0.0037 | 2026-10-30 | phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows au | |
CVE-2026-119545 |
medium | 6.9 | 0.0045 | 2026-10-30 | Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a serve | |
CVE-2026-119427 |
low | 2.3 | 0.0022 | 2026-10-30 | phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting() | |
CVE-2026-119428 |
medium | 6.3 | 0.0031 | 2026-10-30 | phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows | |
CVE-2026-119425 |
medium | 5.3 | 0.0031 | 2026-10-30 | OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerability in the | |
CVE-2026-119426 |
high | 7.7 | 0.0028 | 2026-10-30 | phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows r | |
CVE-2026-119423 |
medium | 6.9 | 0.0038 | 2026-10-30 | OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthentic | |
CVE-2026-119424 |
medium | 6.1 | 0.0042 | 2026-10-30 | OPNsense core before 26.7.8 contains a configuration line injection vulnerability that all | |
CVE-2026-119421 |
high | 8.2 | 0.0034 | 2026-10-30 | Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing aut | |
CVE-2026-119422 |
high | 8.2 | 0.0024 | 2026-10-30 | Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that all | |
CVE-2026-119419 |
critical | 9.2 | 0.0039 | 2026-10-30 | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inj | |
CVE-2026-119420 |
high | 8.7 | 0.0039 | 2026-10-30 | Lago through 1.55.0 contains an authentication bypass vulnerability that allows organizati | |
CVE-2026-119417 |
medium | 6.3 | 0.0045 | 2026-10-30 | CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 throu | |
CVE-2026-119418 |
critical | 9.2 | 0.0048 | 2026-10-30 | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inj | |
CVE-2026-119415 |
medium | 6.3 | 0.0037 | 2026-10-30 | CakePHP through 5.4.3 contains a header injection vulnerability in FormDataPart that allow | |
CVE-2026-119416 |
medium | 6.3 | 0.0018 | 2026-10-30 | CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the H | |
CVE-2026-119409 |
high | 8.6 | 0.0248 | 2026-10-30 | OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticate | |
CVE-2026-119414 |
medium | 5.3 | 0.0036 | 2026-10-30 | Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization b | |
CVE-2026-119407 |
high | 7.1 | 0.0014 | 2026-10-30 | Element Web and Element Desktop before 1.12.32 accept guest credentials from URL fragment | |
CVE-2026-119408 |
high | 8.7 | 0.0063 | 2026-10-30 | n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execu | |
CVE-2026-119378 |
medium | 6.8 | 0.0016 | 2026-10-30 | SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that | |
CVE-2026-119379 |
high | 8.5 | 0.0018 | 2026-10-30 | SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vuln | |
CVE-2026-119376 |
medium | 6.8 | 0.0016 | 2026-10-30 | SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to by | |
CVE-2026-119377 |
low | 2.0 | 0.0012 | 2026-10-30 | SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that i | |
CVE-2026-119374 |
high | 8.5 | 0.0018 | 2026-10-30 | SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete | |
CVE-2026-119375 |
medium | 6.8 | 0.0018 | 2026-10-30 | SQLite before 3.54.0 contains an information disclosure vulnerability that allows attacker | |
CVE-2026-119372 |
medium | 6.8 | 0.0013 | 2026-10-30 | SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a us | |
CVE-2026-119373 |
high | 8.5 | 0.0014 | 2026-10-30 | SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidList | |
CVE-2026-119364 |
medium | 6.0 | 0.0046 | 2026-10-30 | ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link-following vulnerabi | |
CVE-2026-119371 |
medium | 6.8 | 0.0020 | 2026-10-30 | SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to by | |
CVE-2026-119146 |
medium | 6.3 | 0.0046 | 2026-10-30 | ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_re | |
CVE-2026-119147 |
medium | 5.3 | 0.0029 | 2026-10-30 | ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy- |