Browse All CVEs
39,705 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-59440 |
high | 7.5 | 0.0029 | 2026-10-29 | An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem | |
CVE-2025-61166 |
medium | 6.1 | 0.0018 | 2026-10-29 | An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a | |
CVE-2026-30613 |
medium | 4.6 | 0.0018 | 2026-10-29 | An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/ | |
CVE-2026-35043 |
high | 7.8 | 0.0032 | 2026-10-29 | BentoML is a Python library for building online serving systems optimized for AI apps and | |
CVE-2026-35044 |
critical | 9.6 | 0.0040 | 2026-10-29 | BentoML is a Python library for building online serving systems optimized for AI apps and | |
CVE-2026-35045 |
high | 8.1 | 0.0027 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-35046 |
medium | 5.4 | 0.0018 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-35047 |
critical | 9.3 | 0.0056 | 2026-10-29 | Brave CMS is an open-source CMS. Prior to 2.0.6, an Unrestricted File Upload vulnerability | |
CVE-2026-35050 |
high | 8.8 | 0.0045 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35052 |
medium | 5.3 | 0.0065 | 2026-10-29 | D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pand | |
CVE-2026-35164 |
high | 8.8 | 0.0072 | 2026-10-29 | Brave CMS is an open-source CMS. Prior to 2.0.6, an unrestricted file upload vulnerability | |
CVE-2026-35166 |
medium | 5.3 | 0.0019 | 2026-10-29 | Hugo is a static site generator. From 0.60.0 to before 0.159.2, links and image links in t | |
CVE-2026-35167 |
high | 8.1 | 0.0033 | 2026-10-29 | Kedro is a toolbox for production-ready data science. Prior to 1.3.0, the _get_versioned_p | |
CVE-2026-0740 |
critical | 9.8 | 0.6290 | 2026-10-29 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file upload | |
CVE-2026-1839 |
high | 7.8 | 0.0039 | 2026-10-29 | A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` cla | |
CVE-2026-1114 |
critical | 9.8 | 0.0051 | 2026-10-29 | In parisneo/lollms version 2.1.0, the application's session management is vulnerable to im | |
CVE-2026-28810 |
medium | 6.3 | 0.0027 | 2026-10-29 | Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel (inet_ | |
CVE-2026-33227 |
medium | 4.3 | 0.0043 | 2026-10-29 | Improper validation and restriction of a classpath path name vulnerability in Apache Ac | |
CVE-2026-34197 |
— | — | 0.9826 | 2026-10-29 | KEV | Apache ActiveMQ contains an improper input validation vulnerability that allows for code i |
CVE-2026-34896 |
high | 7.5 | 0.0012 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming So | |
CVE-2026-34899 |
medium | 5.3 | 0.0025 | 2026-10-29 | Missing Authorization vulnerability in Eniture technology LTL Freight Quotes – Worldwide E | |
CVE-2026-34903 |
medium | 5.4 | 0.0030 | 2026-10-29 | Missing Authorization vulnerability in OceanWP Ocean Extra allows Exploiting Incorrectly C | |
CVE-2026-34904 |
high | 7.5 | 0.0012 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify Simple Social Media Share But | |
CVE-2026-22666 |
high | 8.6 | 0.1579 | 2026-10-29 | Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code execution v | |
CVE-2026-22679 |
critical | 9.3 | 0.2069 | 2026-10-29 | Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote | |
CVE-2026-23818 |
critical | 9.6 | 0.0033 | 2026-10-29 | A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Net | |
CVE-2026-28808 |
high | 8.3 | 0.0057 | 2026-10-29 | Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated | |
CVE-2026-32144 |
high | 7.6 | 0.0021 | 2026-10-29 | Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module | |
CVE-2026-5731 |
— | — | 0.0035 | 2026-10-29 | Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 1 | |
CVE-2026-5732 |
— | — | 0.0036 | 2026-10-29 | Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vuln | |
CVE-2026-5733 |
— | — | 0.0032 | 2026-10-29 | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fi | |
CVE-2026-5734 |
critical | 9.8 | 0.0034 | 2026-10-29 | Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0. | |
CVE-2026-5735 |
critical | 9.8 | 0.0027 | 2026-10-29 | Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs | |
CVE-2026-35554 |
high | 8.7 | 0.0045 | 2026-10-29 | A race condition in the Apache Kafka Java producer client’s buffer pool management can cau | |
CVE-2026-5627 |
high | 7.2 | 0.0082 | 2026-10-29 | A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and inc | |
CVE-2025-62818 |
critical | 9.8 | 0.0048 | 2026-10-29 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos | |
CVE-2026-33033 |
medium | 6.5 | 0.0091 | 2026-10-29 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. `Mu | |
CVE-2026-33034 |
high | 7.5 | 0.0080 | 2026-10-29 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. ASG | |
CVE-2026-35480 |
medium | 6.2 | 0.0016 | 2026-10-29 | go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interface | |
CVE-2026-35483 |
medium | 5.3 | 0.0033 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35484 |
medium | 5.3 | 0.0032 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-35485 |
high | 7.5 | 0.0069 | 2026-10-29 | text-generation-webui is an open-source web interface for running Large Language Models. P | |
CVE-2026-3902 |
high | 7.5 | 0.0044 | 2026-10-29 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. `AS | |
CVE-2026-4277 |
critical | 9.8 | 0.0047 | 2026-10-29 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add | |
CVE-2026-4292 |
low | 2.7 | 0.0031 | 2026-10-29 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Adm | |
CVE-2026-4740 |
— | — | 0.0015 | 2026-10-29 | A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advan | |
CVE-2026-5372 |
medium | 6.4 | 0.0021 | 2026-10-29 | An issue that allowed a SQL injection attack vector related to saved queries (introduced i | |
CVE-2026-5373 |
high | 8.4 | 0.0022 | 2026-10-29 | An issue that allowed all-organization administrators to promote accounts to superuser sta | |
CVE-2026-5374 |
medium | 5.8 | 0.0022 | 2026-10-29 | An issue that allowed MCP agents to access remediation and asset information from outside | |
CVE-2026-5375 |
low | 2.7 | 0.0020 | 2026-10-29 | An issue that could allow a user with access to a credential to view sensitive fields thro |