Browse All CVEs
13,250 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-116748 |
high | 8.7 | 0.0125 | 2026-10-29 | Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request | |
CVE-2026-111422 |
high | 8.8 | 0.0064 | 2026-10-29 | In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of it | |
CVE-2026-116807 |
high | 7.0 | 0.0027 | 2026-10-29 | OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated u | |
CVE-2026-116808 |
high | 8.6 | 0.0039 | 2026-10-29 | OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated u | |
CVE-2026-116811 |
high | 8.7 | 0.0049 | 2026-10-29 | OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator | |
CVE-2026-116812 |
high | 7.1 | 0.0023 | 2026-10-29 | OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in co | |
CVE-2026-116813 |
high | 7.1 | 0.0023 | 2026-10-29 | OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getCon | |
CVE-2026-116814 |
high | 7.1 | 0.0028 | 2026-10-29 | OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database | |
CVE-2026-116818 |
high | 8.8 | 0.0043 | 2026-10-29 | OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability | |
CVE-2026-116819 |
high | 8.4 | 0.0030 | 2026-10-29 | OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-l | |
CVE-2026-116821 |
high | 7.1 | 0.0028 | 2026-10-29 | YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which | |
CVE-2026-116825 |
high | 8.3 | 0.0022 | 2026-10-29 | YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySig | |
CVE-2026-116826 |
high | 8.2 | 0.0024 | 2026-10-29 | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationMa | |
CVE-2026-116827 |
high | 8.2 | 0.0034 | 2026-10-29 | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV | |
CVE-2024-58400 |
high | 8.8 | 0.0042 | 2026-10-29 | llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_intern | |
CVE-2026-116816 |
high | 8.5 | 0.0014 | 2026-10-29 | llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tok | |
CVE-2026-116836 |
high | 8.8 | 0.0019 | 2026-10-29 | A malicious actor with access to the adjacent network and under certain conditions could e | |
CVE-2026-116837 |
high | 8.8 | 0.0021 | 2026-10-29 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Ov | |
CVE-2026-116838 |
high | 8.8 | 0.0038 | 2026-10-29 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cros | |
CVE-2026-116839 |
high | 7.1 | 0.0010 | 2026-10-29 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cros | |
CVE-2026-116843 |
high | 8.7 | 0.0043 | 2026-10-29 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attac | |
CVE-2026-111820 |
high | 7.2 | 0.0024 | 2026-10-29 | The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is | |
CVE-2026-106174 |
high | 7.5 | 0.0028 | 2026-10-29 | A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 ma | |
CVE-2026-75891 |
high | 8.8 | 0.0031 | 2026-10-29 | The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Inject | |
CVE-2026-111459 |
high | 7.6 | 0.0017 | 2026-10-29 | An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC | |
CVE-2026-111460 |
high | 7.7 | 0.0030 | 2026-10-29 | A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under | |
CVE-2026-111461 |
high | 7.5 | 0.0137 | 2026-10-29 | An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS man | |
CVE-2026-16521 |
high | 7.2 | 0.0088 | 2026-10-29 | An OS command injection vulnerability exists because of insufficient input filtering. An a | |
CVE-2026-18449 |
high | 7.5 | 0.0034 | 2026-10-29 | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands | |
CVE-2026-65219 |
high | 7.4 | 0.0045 | 2026-10-29 | A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by | |
CVE-2026-65220 |
high | 8.8 | 0.0026 | 2026-10-29 | A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafte | |
CVE-2026-65211 |
high | 7.2 | 0.0032 | 2026-10-29 | This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC p | |
CVE-2026-117493 |
high | 8.3 | 0.0028 | 2026-10-29 | Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards/<id>/widgets/<id> A | |
CVE-2026-117494 |
high | 8.3 | 0.0028 | 2026-10-29 | Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/ses | |
CVE-2026-82121 |
high | 7.5 | 0.0021 | 2026-10-29 | Origin Validation Error Vulnerability in HiRDB. This issue affects HiRDB Server Version | |
CVE-2026-85299 |
high | 8.3 | 0.0026 | 2026-10-29 | A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSn | |
CVE-2026-116870 |
high | 8.7 | 0.0023 | 2026-10-29 | In affected versions of Octopus Server, OIDC token issuer validation was performed inconsi | |
CVE-2026-116871 |
high | 8.7 | 0.0037 | 2026-10-29 | Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in | |
CVE-2026-116872 |
high | 8.7 | 0.0035 | 2026-10-29 | Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerabilit | |
CVE-2026-116876 |
high | 7.1 | 0.0024 | 2026-10-29 | Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerabilit | |
CVE-2026-116877 |
high | 8.7 | 0.0033 | 2026-10-29 | Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption v | |
CVE-2026-116878 |
high | 8.7 | 0.0037 | 2026-10-29 | Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption v | |
CVE-2026-116880 |
high | 7.1 | 0.0010 | 2026-10-29 | Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerabi | |
CVE-2026-116896 |
high | 7.7 | 0.0022 | 2026-10-29 | REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon ex | |
CVE-2026-116897 |
high | 7.1 | 0.0021 | 2026-10-29 | REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/ | |
CVE-2026-116898 |
high | 7.1 | 0.0017 | 2026-10-29 | REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk | |
CVE-2026-116899 |
high | 7.1 | 0.0018 | 2026-10-29 | REDAXO before 5.21.4 contains a broken access control vulnerability that allows authentica | |
CVE-2026-117341 |
high | 7.7 | 0.0023 | 2026-10-29 | In affected versions of Octopus Server, creating a user invitation writes the invitation c | |
CVE-2026-117466 |
high | 8.6 | 0.0023 | 2026-10-29 | In affected versions of Octopus Server, a user holding the System Manager role could escal | |
CVE-2026-117536 |
high | 8.6 | 0.0014 | 2026-10-29 | REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the backend us |