Browse All CVEs
39,684 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-5022 |
medium | 6.3 | 0.0021 | 2026-10-29 | The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authenticat | |
CVE-2023-7340 |
medium | 5.3 | 0.0033 | 2026-10-29 | Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause m | |
CVE-2026-32983 |
medium | 6.9 | 0.0044 | 2026-10-29 | Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an im | |
CVE-2026-4958 |
low | 1.3 | 0.0040 | 2026-10-29 | A vulnerability has been found in OpenBMB XAgent 1.0.0. This affects the function ReplaySe | |
CVE-2026-4959 |
medium | 5.5 | 0.0045 | 2026-10-29 | A vulnerability was found in OpenBMB XAgent 1.0.0. This impacts the function check_user of | |
CVE-2026-28367 |
critical | 9.1 | 0.0072 | 2026-10-29 | A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending | |
CVE-2026-28368 |
critical | 9.1 | 0.0073 | 2026-10-29 | A flaw was found in Undertow. This vulnerability allows a remote attacker to construct spe | |
CVE-2026-28369 |
critical | 9.1 | 0.0069 | 2026-10-29 | A flaw was found in Undertow. When Undertow receives an HTTP request where the first heade | |
CVE-2026-33767 |
high | 7.1 | 0.0052 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, in `ob | |
CVE-2026-33770 |
high | 7.1 | 0.0050 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `f | |
CVE-2026-33867 |
critical | 9.1 | 0.0015 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, AVideo | |
CVE-2026-34245 |
medium | 6.3 | 0.0025 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `p | |
CVE-2026-34247 |
medium | 5.4 | 0.0025 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `p | |
CVE-2026-34362 |
medium | 5.4 | 0.0025 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `v | |
CVE-2026-4960 |
high | 7.4 | 0.0079 | 2026-10-29 | A vulnerability was determined in Tenda AC6 15.03.05.16. Affected is the function fromWiza | |
CVE-2026-4961 |
high | 7.4 | 0.0079 | 2026-10-29 | A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is | |
CVE-2026-4963 |
low | 2.1 | 0.0059 | 2026-10-29 | A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the fun | |
CVE-2026-34364 |
medium | 5.3 | 0.0033 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `c | |
CVE-2026-34368 |
medium | 5.3 | 0.0024 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `t | |
CVE-2026-4966 |
low | 2.1 | 0.0026 | 2026-10-29 | A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. Impacted is an un | |
CVE-2026-4968 |
low | 2.1 | 0.0020 | 2026-10-29 | A vulnerability was determined in SourceCodester Diary App 1.0. The affected element is an | |
CVE-2026-26060 |
medium | 6.0 | 0.0035 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.0, a vulnerability in Fleet | |
CVE-2026-26061 |
high | 8.7 | 0.0045 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.0, Fleet contained multiple | |
CVE-2026-29180 |
medium | 4.9 | 0.0033 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.1, a broken access control | |
CVE-2026-34369 |
medium | 5.3 | 0.0039 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `g | |
CVE-2026-34374 |
critical | 9.1 | 0.0036 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `L | |
CVE-2026-34375 |
high | 8.2 | 0.0030 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the YP | |
CVE-2026-34385 |
medium | 6.2 | 0.0021 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injec | |
CVE-2026-34386 |
medium | 6.3 | 0.0033 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.0, a SQL injection vulnerab | |
CVE-2026-34387 |
medium | 5.7 | 0.0133 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.1, a command injection vuln | |
CVE-2026-4969 |
low | 2.0 | 0.0020 | 2026-10-29 | A vulnerability was identified in code-projects Social Networking Site 1.0. The impacted e | |
CVE-2026-4970 |
low | 2.1 | 0.0020 | 2026-10-29 | A security flaw has been discovered in code-projects Social Networking Site 1.0. This affe | |
CVE-2026-31943 |
high | 8.5 | 0.0022 | 2026-10-29 | LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.3, `isPrivateI | |
CVE-2026-31945 |
high | 7.7 | 0.0026 | 2026-10-29 | LibreChat is a ChatGPT clone with additional features. Versions 0.8.2-rc2 through 0.8.2 ar | |
CVE-2026-31950 |
medium | 5.3 | 0.0022 | 2026-10-29 | LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc2 through 0.8.2 | |
CVE-2026-31951 |
medium | 5.7 | 0.0025 | 2026-10-29 | LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc1 through 0.8.3 | |
CVE-2026-33044 |
high | 7.3 | 0.0023 | 2026-10-29 | Home Assistant is open source home automation software that puts local control and privacy | |
CVE-2026-33045 |
high | 7.3 | 0.0021 | 2026-10-29 | Home Assistant is open source home automation software that puts local control and privacy | |
CVE-2026-33654 |
high | 8.9 | 0.0051 | 2026-10-29 | nanobot is a personal AI assistant. Prior to version 0.1.6, an indirect prompt injection v | |
CVE-2026-33765 |
high | 8.9 | 0.0130 | 2026-10-29 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and in | |
CVE-2026-33872 |
high | 7.1 | 0.0040 | 2026-10-29 | elixir-nodejs provides an Elixir API for calling Node.js functions. A vulnerability in ver | |
CVE-2026-34205 |
critical | 9.6 | 0.0027 | 2026-10-29 | Home Assistant is open source home automation software that puts local control and privacy | |
CVE-2026-34388 |
medium | 6.6 | 0.0027 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.0, a denial-of-service vuln | |
CVE-2026-34389 |
medium | 4.9 | 0.0019 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.0, Fleet contained an issue | |
CVE-2026-34391 |
medium | 6.6 | 0.0017 | 2026-10-29 | Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet | |
CVE-2026-34475 |
critical | 9.8 | 0.0021 | 2026-10-29 | Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked r | |
CVE-2026-4971 |
low | 2.1 | 0.0016 | 2026-10-29 | A weakness has been identified in SourceCodester Note Taking App up to 1.0. This impacts a | |
CVE-2026-4972 |
low | 1.9 | 0.0021 | 2026-10-29 | A security vulnerability has been detected in code-projects Online Reviewer System up to 1 | |
CVE-2026-4973 |
low | 2.0 | 0.0025 | 2026-10-29 | A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by t | |
CVE-2026-4974 |
high | 7.4 | 0.0064 | 2026-10-29 | A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fro |