Browse All CVEs
42,945 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-2862 |
medium | 5.3 | 0.0039 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-34513 |
low | 2.7 | 0.0046 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34514 |
low | 2.7 | 0.0033 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34515 |
medium | 6.6 | 0.0045 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34516 |
medium | 6.6 | 0.0046 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34517 |
low | 2.7 | 0.0040 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34518 |
low | 2.7 | 0.0035 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34519 |
low | 2.7 | 0.0030 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34520 |
low | 2.7 | 0.0048 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34525 |
medium | 6.3 | 0.0030 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34531 |
high | 8.2 | 0.0034 | 2026-10-29 | Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prio | |
CVE-2026-34543 |
high | 8.7 | 0.0050 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34544 |
high | 8.4 | 0.0025 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34545 |
high | 8.4 | 0.0063 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-4101 |
critical | 9.8 | 0.0037 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-4364 |
medium | 5.4 | 0.0009 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-4820 |
medium | 4.3 | 0.0012 | 2026-10-29 | IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on | |
CVE-2026-5312 |
medium | 5.5 | 0.0055 | 2026-10-29 | A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, D | |
CVE-2026-34559 |
critical | 9.0 | 0.0033 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34560 |
critical | 9.0 | 0.0039 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34561 |
high | 8.4 | 0.0023 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34562 |
critical | 9.0 | 0.0028 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34563 |
critical | 9.0 | 0.0027 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34564 |
critical | 9.0 | 0.0031 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34565 |
critical | 9.0 | 0.0027 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34566 |
critical | 9.0 | 0.0027 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34567 |
critical | 9.0 | 0.0027 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34568 |
critical | 9.0 | 0.0032 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34569 |
critical | 9.0 | 0.0033 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34570 |
high | 8.8 | 0.0051 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34571 |
critical | 9.0 | 0.0040 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-34572 |
high | 8.8 | 0.0051 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-3987 |
high | 8.6 | 0.0069 | 2026-10-29 | A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may | |
CVE-2026-5313 |
low | 2.1 | 0.0029 | 2026-10-29 | A vulnerability has been found in Nothings stb up to 2.30. This issue affects the function | |
CVE-2026-32925 |
high | 8.4 | 0.0021 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CV7B | |
CVE-2026-32926 |
high | 8.4 | 0.0020 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFil | |
CVE-2026-32927 |
high | 8.4 | 0.0020 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInI | |
CVE-2026-32928 |
high | 8.4 | 0.0021 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSav | |
CVE-2026-32929 |
high | 8.4 | 0.0020 | 2026-10-29 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_me | |
CVE-2026-5314 |
low | 2.1 | 0.0069 | 2026-10-29 | A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitF | |
CVE-2026-21765 |
high | 7.8 | 0.0010 | 2026-10-29 | HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. Th | |
CVE-2026-21767 |
low | 3.3 | 0.0012 | 2026-10-29 | HCL BigFix Platform is affected by insufficient authentication. The application might all | |
CVE-2026-5315 |
low | 2.1 | 0.0052 | 2026-10-29 | A vulnerability was determined in Nothings stb up to 1.26. The affected element is the fun | |
CVE-2026-5316 |
low | 2.1 | 0.0045 | 2026-10-29 | A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the fun | |
CVE-2026-1243 |
medium | 5.4 | 0.0021 | 2026-10-29 | IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This | |
CVE-2026-5317 |
low | 2.1 | 0.0043 | 2026-10-29 | A security flaw has been discovered in Nothings stb up to 1.22. This affects the function | |
CVE-2026-5319 |
low | 2.1 | 0.0034 | 2026-10-29 | A security vulnerability has been detected in itsourcecode Payroll Management System up to | |
CVE-2026-5322 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd | |
CVE-2026-5323 |
low | 1.9 | 0.0013 | 2026-10-29 | A vulnerability was found in priyankark a11y-mcp up to 1.0.5. This vulnerability affects t | |
CVE-2026-5325 |
low | 2.0 | 0.0020 | 2026-10-29 | A vulnerability was determined in SourceCodester Simple Customer Relationship Management S |