Browse All CVEs
39,489 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-34211 |
medium | 6.9 | 0.0041 | 2026-10-29 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, the @nyariv/sandboxjs parse | |
CVE-2026-34217 |
medium | 6.9 | 0.0030 | 2026-10-29 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, a scope modification vulner | |
CVE-2026-34378 |
medium | 6.5 | 0.0027 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34379 |
— | — | 0.0029 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34380 |
medium | 5.9 | 0.0027 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34444 |
high | 7.9 | 0.0064 | 2026-10-29 | Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute | |
CVE-2026-34588 |
high | 8.6 | 0.0050 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34589 |
high | 8.4 | 0.0043 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34950 |
critical | 9.1 | 0.0025 | 2026-10-29 | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, the publ | |
CVE-2026-34951 |
medium | 5.1 | 0.0015 | 2026-10-29 | Workbench is a suite of tools for administrators and developers to interact with Salesforc | |
CVE-2026-34969 |
low | 2.3 | 0.0028 | 2026-10-29 | Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth servi | |
CVE-2026-34982 |
— | — | 0.0046 | 2026-10-29 | Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline san | |
CVE-2026-5665 |
medium | 5.5 | 0.0033 | 2026-10-29 | A security vulnerability has been detected in code-projects Online FIR System 1.0. Affecte | |
CVE-2026-5666 |
medium | 5.5 | 0.0031 | 2026-10-29 | A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issu | |
CVE-2026-5704 |
medium | 5.0 | 0.0045 | 2026-10-29 | A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a | |
CVE-2026-34783 |
high | 8.1 | 0.0052 | 2026-10-29 | Ferret is a declarative system for working with web data. Prior to 2.0.0-alpha.4, a path t | |
CVE-2026-34841 |
critical | 9.8 | 0.0024 | 2026-10-29 | Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affe | |
CVE-2026-34975 |
medium | 4.3 | 0.0020 | 2026-10-29 | Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF hea | |
CVE-2026-34976 |
critical | 10.0 | 0.0207 | 2026-10-29 | Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant | |
CVE-2026-34977 |
critical | 9.3 | 0.0079 | 2026-10-29 | Aperi'Solve is an open-source steganalysis web platform. In versions 3.1.3 through 3.2.0, | |
CVE-2026-34981 |
medium | 5.8 | 0.0026 | 2026-10-29 | The whisperX API is a tool for enhancing and analyzing audio content. From 0.3.1 to 0.5.0, | |
CVE-2026-34986 |
— | — | 0.0066 | 2026-10-29 | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of | |
CVE-2026-34989 |
critical | 9.4 | 0.0030 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-35029 |
high | 8.7 | 0.3861 | 2026-10-29 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prio | |
CVE-2026-35030 |
critical | 9.4 | 0.0064 | 2026-10-29 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prio | |
CVE-2026-35035 |
critical | 9.0 | 0.0046 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-35036 |
high | 7.5 | 0.0033 | 2026-10-29 | Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior t | |
CVE-2026-35037 |
high | 7.2 | 0.0062 | 2026-10-29 | Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior t | |
CVE-2026-35039 |
critical | 9.1 | 0.0022 | 2026-10-29 | fast-jwt provides fast JSON Web Token (JWT) implementation. From 0.0.1 to before 6.2.0, se | |
CVE-2026-35042 |
high | 7.5 | 0.0016 | 2026-10-29 | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, fast-jwt | |
CVE-2026-5668 |
low | 1.9 | 0.0021 | 2026-10-29 | A flaw has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b29 | |
CVE-2026-5669 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability has been found in Cyber-III Student-Management-System up to 1a938fa61e9f73 | |
CVE-2026-5670 |
low | 2.1 | 0.0021 | 2026-10-29 | A vulnerability was found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e | |
CVE-2025-57835 |
high | 7.5 | 0.0029 | 2026-10-29 | An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem | |
CVE-2025-59440 |
high | 7.5 | 0.0029 | 2026-10-29 | An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem | |
CVE-2025-61166 |
medium | 6.1 | 0.0018 | 2026-10-29 | An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a | |
CVE-2026-30613 |
medium | 4.6 | 0.0018 | 2026-10-29 | An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/ | |
CVE-2026-35043 |
high | 7.8 | 0.0032 | 2026-10-29 | BentoML is a Python library for building online serving systems optimized for AI apps and | |
CVE-2026-35044 |
critical | 9.6 | 0.0040 | 2026-10-29 | BentoML is a Python library for building online serving systems optimized for AI apps and | |
CVE-2026-35045 |
high | 8.1 | 0.0027 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-35046 |
medium | 5.4 | 0.0018 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-35047 |
critical | 9.3 | 0.0056 | 2026-10-29 | Brave CMS is an open-source CMS. Prior to 2.0.6, an Unrestricted File Upload vulnerability | |
CVE-2026-35050 |
high | 8.8 | 0.0045 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35052 |
medium | 5.3 | 0.0065 | 2026-10-29 | D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pand | |
CVE-2026-35164 |
high | 8.8 | 0.0072 | 2026-10-29 | Brave CMS is an open-source CMS. Prior to 2.0.6, an unrestricted file upload vulnerability | |
CVE-2026-35166 |
medium | 5.3 | 0.0019 | 2026-10-29 | Hugo is a static site generator. From 0.60.0 to before 0.159.2, links and image links in t | |
CVE-2026-35167 |
high | 8.1 | 0.0033 | 2026-10-29 | Kedro is a toolbox for production-ready data science. Prior to 1.3.0, the _get_versioned_p | |
CVE-2026-0740 |
critical | 9.8 | 0.6290 | 2026-10-29 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file upload | |
CVE-2026-1839 |
high | 7.8 | 0.0039 | 2026-10-29 | A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` cla | |
CVE-2026-1114 |
critical | 9.8 | 0.0051 | 2026-10-29 | In parisneo/lollms version 2.1.0, the application's session management is vulnerable to im |