Browse All CVEs
39,489 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-34727 |
critical | 9.1 | 0.0028 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the OIDC c | |
CVE-2026-35594 |
medium | 6.5 | 0.0031 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's | |
CVE-2026-40021 |
medium | 6.3 | 0.0077 | 2026-10-29 | Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layout | |
CVE-2026-40023 |
medium | 6.3 | 0.0050 | 2026-10-29 | Apache Log4cxx's XMLLayout https://logging.apache.org/log4cxx/1.7.0/classlog4cxx_1_1xml_1 | |
CVE-2026-35595 |
high | 8.3 | 0.0029 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CanUpd | |
CVE-2026-35596 |
medium | 4.3 | 0.0027 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the hasAcc | |
CVE-2026-35597 |
high | 7.5 | 0.0030 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the TOTP f | |
CVE-2026-35598 |
medium | 4.3 | 0.0022 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV | |
CVE-2026-35599 |
medium | 6.5 | 0.0035 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the addRep | |
CVE-2026-35600 |
medium | 5.4 | 0.0019 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, task title | |
CVE-2026-35601 |
medium | 4.1 | 0.0020 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV | |
CVE-2026-35602 |
high | 7.1 | 0.0034 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the Vikunj | |
CVE-2026-40073 |
high | 8.2 | 0.0054 | 2026-10-29 | SvelteKit is a framework for rapidly developing robust, performant web applications using | |
CVE-2026-40074 |
medium | 6.3 | 0.0037 | 2026-10-29 | SvelteKit is a framework for rapidly developing robust, performant web applications using | |
CVE-2026-40086 |
medium | 5.3 | 0.0059 | 2026-10-29 | Rembg is a tool to remove images background. Prior to 2.0.75, a path traversal vulnerabili | |
CVE-2026-40097 |
low | 3.7 | 0.0018 | 2026-10-29 | Step CA is an online certificate authority for secure, automated certificate management fo | |
CVE-2026-40100 |
medium | 5.3 | 0.0025 | 2026-10-29 | FastGPT is an AI Agent building platform. Prior to 4.14.10.3, the /api/core/app/mcpTools/r | |
CVE-2026-40103 |
medium | 5.4 | 0.0022 | 2026-10-29 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's | |
CVE-2026-40156 |
high | 7.8 | 0.0021 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI automatically loads a | |
CVE-2026-40157 |
critical | 9.4 | 0.0038 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, cmd_unpack in the recipe CLI ex | |
CVE-2026-40158 |
high | 7.8 | 0.0024 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI's AST-based Python sa | |
CVE-2026-40159 |
medium | 5.5 | 0.0018 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI’s MCP (Model Context | |
CVE-2026-40160 |
high | 7.1 | 0.0046 | 2026-10-29 | PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, web_crawl's httpx fallbac | |
CVE-2026-1502 |
medium | 5.7 | 0.0056 | 2026-10-29 | CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. | |
CVE-2026-31939 |
high | 8.3 | 0.0035 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38, there is a path traversal i | |
CVE-2026-31940 |
high | 8.8 | 0.0024 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, in main/lp/a | |
CVE-2026-31941 |
medium | 6.5 | 0.0023 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, Chamilo LMS | |
CVE-2026-32892 |
high | 8.8 | 0.0153 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, Chamilo LMS | |
CVE-2026-32893 |
medium | 5.4 | 0.0014 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, a Reflected Cross-Site S | |
CVE-2026-32894 |
high | 7.1 | 0.0028 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Insecure | |
CVE-2026-32930 |
high | 7.1 | 0.0019 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Insecure | |
CVE-2026-32931 |
high | 8.8 | 0.0050 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an unrestric | |
CVE-2026-32932 |
medium | 6.1 | 0.0018 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Open Redi | |
CVE-2026-33141 |
medium | 6.5 | 0.0014 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, an Insecure Direct Objec | |
CVE-2026-5483 |
critical | 9.9 | 0.0049 | 2026-10-29 | A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh- | |
CVE-2026-27460 |
medium | 6.5 | 0.0030 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-33618 |
high | 8.8 | 0.0032 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to .0.0-RC.3, the PlatformConfiguration | |
CVE-2026-33698 |
critical | 9.3 | 0.0032 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38, a chained attack can enable | |
CVE-2026-33702 |
high | 7.1 | 0.0024 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, Chamilo LMS | |
CVE-2026-33703 |
high | 7.1 | 0.0017 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, an Insecure Direct Objec | |
CVE-2026-33704 |
high | 8.8 | 0.0042 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38, any authenticated user (inc | |
CVE-2026-33705 |
medium | 5.3 | 0.0024 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38, Twig template files (.tpl) | |
CVE-2026-33706 |
high | 7.1 | 0.0017 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38, any authenticated user with | |
CVE-2026-33707 |
critical | 9.8 | 0.0043 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, the default | |
CVE-2026-33708 |
medium | 6.5 | 0.0021 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38, the get_user_info_from_user | |
CVE-2026-33710 |
high | 7.5 | 0.0029 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, REST API key | |
CVE-2026-33736 |
medium | 6.5 | 0.0021 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, any authenticated user ( | |
CVE-2026-33737 |
medium | 6.5 | 0.0022 | 2026-10-29 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, multiple fil | |
CVE-2026-3446 |
medium | 6.0 | 0.0019 | 2026-10-29 | When calling base64.b64decode() or related functions the decoding process would stop after | |
CVE-2026-40168 |
high | 8.2 | 0.0037 | 2026-10-29 | Postiz is an AI social media scheduling tool. Prior to 2.21.5, the /api/public/stream endp |