Browse All CVEs
39,489 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-4829 |
medium | 5.4 | 0.0017 | 2026-10-29 | Improper authentication in the external OAuth authentication flow in Devolutions Server 20 | |
CVE-2026-4924 |
high | 8.2 | 0.0033 | 2026-10-29 | Improper authentication in the two-factor authentication (2FA) feature in Devolutions Se | |
CVE-2026-4925 |
medium | 5.0 | 0.0020 | 2026-10-29 | Improper access control in the users MFA feature in Devolutions Server allows an authentic | |
CVE-2026-4927 |
medium | 6.5 | 0.0023 | 2026-10-29 | Exposure of sensitive information in the users MFA feature in Devolutions Server allows us | |
CVE-2026-4989 |
medium | 4.3 | 0.0017 | 2026-10-29 | Improper input validation in the gateway health check feature in Devolutions Server allows | |
CVE-2026-5175 |
medium | 5.0 | 0.0026 | 2026-10-29 | Improper access control in the multi-factor authentication (MFA) management API in Devolut | |
CVE-2026-20041 |
medium | 6.1 | 0.0025 | 2026-10-29 | A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an | |
CVE-2026-20042 |
medium | 6.5 | 0.0031 | 2026-10-29 | A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow a | |
CVE-2026-20085 |
medium | 6.1 | 0.0019 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an unauthen | |
CVE-2026-20087 |
medium | 4.8 | 0.0018 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20088 |
medium | 4.8 | 0.0023 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20089 |
medium | 4.8 | 0.0025 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20090 |
medium | 4.8 | 0.0025 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20093 |
critical | 9.8 | 0.0101 | 2026-10-29 | A vulnerability in the change password functionality of Cisco Integrated Management Contro | |
CVE-2026-20094 |
high | 8.8 | 0.0114 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20095 |
medium | 6.5 | 0.0095 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20096 |
medium | 6.5 | 0.0073 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20097 |
medium | 6.5 | 0.0041 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20151 |
high | 7.3 | 0.0027 | 2026-10-29 | A vulnerability in the web interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) | |
CVE-2026-20155 |
high | 8.0 | 0.0027 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Networ | |
CVE-2026-20160 |
critical | 9.8 | 0.0093 | 2026-10-29 | A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unaut | |
CVE-2026-20174 |
medium | 4.9 | 0.0050 | 2026-10-29 | A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could all | |
CVE-2026-33978 |
medium | 6.1 | 0.0029 | 2026-10-29 | Notesnook is a note-taking app focused on user privacy & ease of use. Prior to version 3.3 | |
CVE-2026-33990 |
medium | 6.8 | 0.0026 | 2026-10-29 | Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Dock | |
CVE-2026-5310 |
low | 1.1 | 0.0010 | 2026-10-29 | A vulnerability was identified in Enter Software Iperius Backup up to 8.7.2. This impacts | |
CVE-2026-34072 |
critical | 9.8 | 0.0046 | 2026-10-29 | Cr*nMaster (cronmaster) is a Cronjob management UI with human readable syntax, live loggin | |
CVE-2026-34076 |
high | 7.4 | 0.0032 | 2026-10-29 | Clerk JavaScript is the official JavaScript repository for Clerk authentication. In @clerk | |
CVE-2026-34159 |
critical | 9.8 | 0.0162 | 2026-10-29 | llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC | |
CVE-2026-34236 |
critical | 9.8 | 0.0022 | 2026-10-29 | Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. From version 8.0.0 to | |
CVE-2026-34376 |
high | 7.5 | 0.0038 | 2026-10-29 | PdfDing is a selfhosted PDF manager, viewer and editor offering a seamless user experience | |
CVE-2026-34751 |
critical | 9.1 | 0.0031 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-35000 |
high | 7.1 | 0.0029 | 2026-10-29 | ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in t | |
CVE-2026-34455 |
high | 8.7 | 0.0036 | 2026-10-29 | Hi.Events is an open-source event management and ticket selling platform. From version 0.8 | |
CVE-2026-34456 |
critical | 9.8 | 0.0046 | 2026-10-29 | Reviactyl is an open-source game server management panel built using Laravel, React, Filam | |
CVE-2026-34746 |
high | 7.7 | 0.0031 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34747 |
high | 8.2 | 0.0032 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34748 |
high | 8.7 | 0.0029 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34749 |
medium | 5.4 | 0.0013 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34750 |
medium | 6.5 | 0.0036 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-5311 |
medium | 5.5 | 0.0103 | 2026-10-29 | A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-32 | |
CVE-2026-1345 |
high | 7.3 | 0.0036 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-1491 |
medium | 5.3 | 0.0039 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-22815 |
medium | 6.9 | 0.0046 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-2475 |
medium | 4.7 | 0.0026 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-2862 |
medium | 5.3 | 0.0039 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-34513 |
low | 2.7 | 0.0046 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34514 |
low | 2.7 | 0.0033 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34515 |
medium | 6.6 | 0.0045 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34516 |
medium | 6.6 | 0.0046 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34517 |
low | 2.7 | 0.0040 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v |