Browse All CVEs
42,945 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-5244 |
medium | 5.5 | 0.0076 | 2026-10-29 | A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function m | |
CVE-2026-0634 |
high | 7.8 | 0.0053 | 2026-10-29 | Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps | |
CVE-2026-29131 |
medium | 4.9 | 0.0023 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially craf | |
CVE-2026-29132 |
medium | 6.3 | 0.0026 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a vi | |
CVE-2026-29133 |
medium | 5.3 | 0.0024 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys | |
CVE-2026-29134 |
medium | 5.3 | 0.0023 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA | |
CVE-2026-29135 |
medium | 5.3 | 0.0026 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password | |
CVE-2026-29136 |
medium | 5.3 | 0.0010 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into | |
CVE-2026-29137 |
medium | 5.3 | 0.0019 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security ta | |
CVE-2026-29138 |
medium | 6.3 | 0.0022 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially craf | |
CVE-2026-29139 |
high | 7.8 | 0.0028 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GIN | |
CVE-2026-29140 |
high | 7.7 | 0.0012 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-c | |
CVE-2026-29141 |
high | 7.7 | 0.0022 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject s | |
CVE-2026-29142 |
medium | 6.3 | 0.0013 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-enc | |
CVE-2026-29143 |
high | 7.8 | 0.0025 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inn | |
CVE-2026-29144 |
high | 7.8 | 0.0022 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject s | |
CVE-2026-33613 |
high | 8.8 | 0.0052 | 2026-10-29 | Due to the improper neutralisation of special elements used in an OS command, a remote att | |
CVE-2026-33614 |
high | 7.5 | 0.0034 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-33615 |
critical | 9.1 | 0.0042 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-33616 |
high | 7.5 | 0.0034 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated blind SQL Injection vuln | |
CVE-2026-33617 |
medium | 5.3 | 0.0027 | 2026-10-29 | An unauthenticated remote attacker can access a configuration file containing database cre | |
CVE-2026-5245 |
low | 2.9 | 0.0073 | 2026-10-29 | A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle | |
CVE-2026-5246 |
low | 2.9 | 0.0065 | 2026-10-29 | A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg | |
CVE-2026-32145 |
high | 8.7 | 0.0063 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allo | |
CVE-2026-5326 |
medium | 5.5 | 0.0042 | 2026-10-29 | A vulnerability was identified in SourceCodester Leave Application System 1.0. Impacted is | |
CVE-2026-5327 |
low | 2.1 | 0.0124 | 2026-10-29 | A security flaw has been discovered in efforthye fast-filesystem-mcp up to 3.5.1. The affe | |
CVE-2026-34890 |
medium | 6.5 | 0.0014 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-3872 |
— | — | 0.0045 | 2026-10-29 | A flaw was found in Keycloak. This issue allows an attacker, who controls another path on | |
CVE-2026-4282 |
— | — | 0.0043 | 2026-10-29 | A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks | |
CVE-2026-4325 |
medium | 5.3 | 0.0026 | 2026-10-29 | A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks | |
CVE-2026-4634 |
— | — | 0.0064 | 2026-10-29 | A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability b | |
CVE-2026-4636 |
— | — | 0.0044 | 2026-10-29 | A flaw was found in Keycloak. An authenticated user with the uma_protection role can bypas | |
CVE-2026-5328 |
low | 2.1 | 0.0021 | 2026-10-29 | A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b0 | |
CVE-2026-5330 |
medium | 5.5 | 0.0032 | 2026-10-29 | A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0. A | |
CVE-2026-26927 |
medium | 5.1 | 0.0028 | 2026-10-29 | Szafir SDK Web is a browser plug-in that can run SzafirHost application which download the | |
CVE-2026-26928 |
high | 8.7 | 0.0020 | 2026-10-29 | SzafirHost downloads necessary files in the context of the initiating web page. When calle | |
CVE-2026-28805 |
high | 8.8 | 0.0047 | 2026-10-29 | OpenSTAManager is an open source management software for technical assistance and invoicin | |
CVE-2026-29782 |
high | 7.2 | 0.0059 | 2026-10-29 | OpenSTAManager is an open source management software for technical assistance and invoicin | |
CVE-2026-2699 |
critical | 9.8 | 0.5839 | 2026-10-29 | Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attack | |
CVE-2026-2701 |
high | 8.8 | 0.5454 | 2026-10-29 | Authenticated user can upload a malicious file to the server and execute it, which leads t | |
CVE-2026-2737 |
high | 8.5 | 0.0020 | 2026-10-29 | A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an | |
CVE-2026-30867 |
medium | 6.5 | 0.0033 | 2026-10-29 | CocoaMQTT is a MQTT 5.0 client library for iOS and macOS written in Swift. Prior to versio | |
CVE-2026-31931 |
high | 7.5 | 0.0037 | 2026-10-29 | Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, | |
CVE-2026-31932 |
high | 7.5 | 0.0028 | 2026-10-29 | Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, ineffic | |
CVE-2026-31933 |
high | 7.5 | 0.0037 | 2026-10-29 | Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, special | |
CVE-2026-35168 |
high | 8.8 | 0.0068 | 2026-10-29 | OpenSTAManager is an open source management software for technical assistance and invoicin | |
CVE-2026-3692 |
high | 8.7 | 0.0043 | 2026-10-29 | In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authentica | |
CVE-2026-5332 |
low | 2.0 | 0.0020 | 2026-10-29 | A vulnerability was identified in Xiaopi Panel 1.0.0. This vulnerability affects unknown c | |
CVE-2026-5333 |
medium | 5.5 | 0.0298 | 2026-10-29 | A security flaw has been discovered in DefaultFuction Content-Management-System 1.0. This | |
CVE-2026-5334 |
medium | 5.5 | 0.0039 | 2026-10-29 | A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is a |