Browse All CVEs
41,068 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-5648 |
medium | 5.5 | 0.0026 | 2026-10-29 | A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affec | |
CVE-2026-5649 |
low | 2.1 | 0.0025 | 2026-10-29 | A vulnerability has been found in code-projects Online Application System for Admission 1. | |
CVE-2026-5650 |
medium | 5.5 | 0.0031 | 2026-10-29 | A vulnerability was found in code-projects Online Application System for Admission 1.0. Im | |
CVE-2026-5659 |
low | 2.1 | 0.0027 | 2026-10-29 | A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the funct | |
CVE-2026-5660 |
low | 2.1 | 0.0020 | 2026-10-29 | A vulnerability was determined in itsourcecode Construction Management System 1.0. The imp | |
CVE-2026-25932 |
medium | 4.8 | 0.0029 | 2026-10-29 | GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an a | |
CVE-2026-26026 |
high | 7.2 | 0.1196 | 2026-10-29 | GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, tem | |
CVE-2026-29047 |
high | 8.8 | 0.0040 | 2026-10-29 | GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and | |
CVE-2026-33403 |
medium | 6.1 | 0.0019 | 2026-10-29 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and in | |
CVE-2026-33404 |
medium | 6.1 | 0.0015 | 2026-10-29 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and in | |
CVE-2026-33406 |
medium | 6.1 | 0.0026 | 2026-10-29 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and in | |
CVE-2026-34885 |
high | 8.5 | 0.0167 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-34897 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-5663 |
medium | 6.9 | 0.0197 | 2026-10-29 | A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function | |
CVE-2026-21367 |
high | 7.5 | 0.0021 | 2026-10-29 | Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action s | |
CVE-2026-21371 |
high | 7.8 | 0.0010 | 2026-10-29 | Memory Corruption when retrieving output buffer with insufficient size validation. | |
CVE-2026-21372 |
high | 7.8 | 0.0010 | 2026-10-29 | Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy oper | |
CVE-2026-21373 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when accessing an output buffer without validating its size during IOCTL | |
CVE-2026-21374 |
high | 7.8 | 0.0011 | 2026-10-29 | Memory Corruption when processing auxiliary sensor input/output control commands with insu | |
CVE-2026-21375 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when accessing an output buffer without validating its size during IOCTL | |
CVE-2026-21376 |
high | 7.8 | 0.0010 | 2026-10-29 | Memory Corruption when accessing an output buffer without validating its size during IOCTL | |
CVE-2026-21378 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when accessing an output buffer without validating its size during IOCTL | |
CVE-2026-21380 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory. | |
CVE-2026-21381 |
high | 7.5 | 0.0015 | 2026-10-29 | Transient DOS when receiving a service data frame with excessive length during device matc | |
CVE-2026-21382 |
high | 7.8 | 0.0008 | 2026-10-29 | Memory Corruption when handling power management requests with improperly sized input/outp | |
CVE-2026-33405 |
medium | 4.8 | 0.0018 | 2026-10-29 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and in | |
CVE-2026-33752 |
high | 8.6 | 0.0048 | 2026-10-29 | curl_cffi is the a Python binding for curl. Prior to 0.15.0, curl_cffi does not restrict r | |
CVE-2026-34148 |
high | 7.5 | 0.0057 | 2026-10-29 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. | |
CVE-2026-34208 |
critical | 10.0 | 0.0058 | 2026-10-29 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, SandboxJS blocks direct ass | |
CVE-2026-34211 |
medium | 6.9 | 0.0041 | 2026-10-29 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, the @nyariv/sandboxjs parse | |
CVE-2026-34217 |
medium | 6.9 | 0.0030 | 2026-10-29 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, a scope modification vulner | |
CVE-2026-34378 |
medium | 6.5 | 0.0027 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34379 |
— | — | 0.0029 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34380 |
medium | 5.9 | 0.0027 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34444 |
high | 7.9 | 0.0064 | 2026-10-29 | Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute | |
CVE-2026-34588 |
high | 8.6 | 0.0050 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34589 |
high | 8.4 | 0.0043 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34950 |
critical | 9.1 | 0.0025 | 2026-10-29 | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, the publ | |
CVE-2026-34951 |
medium | 5.1 | 0.0015 | 2026-10-29 | Workbench is a suite of tools for administrators and developers to interact with Salesforc | |
CVE-2026-34969 |
low | 2.3 | 0.0028 | 2026-10-29 | Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth servi | |
CVE-2026-34982 |
— | — | 0.0046 | 2026-10-29 | Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline san | |
CVE-2026-5665 |
medium | 5.5 | 0.0033 | 2026-10-29 | A security vulnerability has been detected in code-projects Online FIR System 1.0. Affecte | |
CVE-2026-5666 |
medium | 5.5 | 0.0031 | 2026-10-29 | A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issu | |
CVE-2026-5704 |
medium | 5.5 | 0.0045 | 2026-10-29 | A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a | |
CVE-2026-34783 |
high | 8.1 | 0.0052 | 2026-10-29 | Ferret is a declarative system for working with web data. Prior to 2.0.0-alpha.4, a path t | |
CVE-2026-34841 |
critical | 9.8 | 0.0024 | 2026-10-29 | Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affe | |
CVE-2026-34975 |
medium | 4.3 | 0.0020 | 2026-10-29 | Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF hea | |
CVE-2026-34976 |
critical | 10.0 | 0.0207 | 2026-10-29 | Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant | |
CVE-2026-34977 |
critical | 9.3 | 0.0079 | 2026-10-29 | Aperi'Solve is an open-source steganalysis web platform. In versions 3.1.3 through 3.2.0, | |
CVE-2026-34981 |
medium | 5.8 | 0.0026 | 2026-10-29 | The whisperX API is a tool for enhancing and analyzing audio content. From 0.3.1 to 0.5.0, |