Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-56124 |
high | 8.7 | 0.0064 | 2026-10-29 | phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability | |
CVE-2026-55844 |
high | 7.5 | 0.0020 | 2026-10-29 | Home Assistant is open source home automation software that puts local control and privacy | |
CVE-2026-55607 |
high | 7.7 | 0.0069 | 2026-10-29 | Claude Code is an agentic coding tool. From 2.1.38 until 2.1.163, Claude Code's worktree | |
CVE-2026-49049 |
high | 7.5 | 0.0099 | 2026-10-29 | The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated att | |
CVE-2026-46406 |
medium | 4.4 | 0.0015 | 2026-10-29 | Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy c | |
CVE-2026-13579 |
low | 2.1 | 0.0033 | 2026-10-29 | A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by | |
CVE-2026-13578 |
low | 2.1 | 0.0033 | 2026-10-29 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affect | |
CVE-2026-13574 |
low | 1.9 | 0.0018 | 2026-10-29 | A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the functio | |
CVE-2026-13573 |
low | 1.9 | 0.0017 | 2026-10-29 | A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llv | |
CVE-2026-13572 |
low | 2.1 | 0.0033 | 2026-10-29 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacte | |
CVE-2026-13571 |
medium | 5.5 | 0.0051 | 2026-10-29 | A flaw has been found in SourceCodester Simple Food Ordering System 1.0. The affected elem | |
CVE-2026-56457 |
medium | 4.3 | 0.0030 | 2026-10-29 | HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vuln | |
CVE-2026-54371 |
high | 8.4 | 0.0015 | 2026-10-29 | attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and s | |
CVE-2026-54370 |
high | 7.2 | 0.0009 | 2026-10-29 | acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition v | |
CVE-2026-54369 |
high | 8.4 | 0.0015 | 2026-10-29 | acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname | |
CVE-2026-40524 |
high | 7.2 | 0.0034 | 2026-10-29 | FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the get_gl_transac | |
CVE-2026-40522 |
high | 7.1 | 0.0023 | 2026-10-29 | FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Bank Statement | |
CVE-2026-40521 |
high | 8.7 | 0.0098 | 2026-10-29 | FrontAccounting before 2.4.20 contains a path traversal vulnerability in the attachment up | |
CVE-2026-13570 |
low | 2.0 | 0.0033 | 2026-10-29 | A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted i | |
CVE-2026-13569 |
low | 2.0 | 0.0035 | 2026-10-29 | A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue | |
CVE-2026-13568 |
medium | 5.5 | 0.0047 | 2026-10-29 | A weakness has been identified in SourceCodester Inventory Management System 1.0. This vul | |
CVE-2026-13567 |
low | 2.1 | 0.0047 | 2026-10-29 | A security flaw has been discovered in code-projects Online Music Site 1.0. This affects a | |
CVE-2026-13566 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Af | |
CVE-2026-13565 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.p | |
CVE-2026-13165 |
high | 8.6 | 0.0071 | 2026-10-29 | SzafirHost verifies the downloaded native library archive with one JarFile parser (reading | |
CVE-2026-12856 |
— | — | 0.0055 | 2026-10-29 | A flaw was found in the vscode-java extension, which provides Java language support for Vi | |
CVE-2026-12616 |
medium | 6.9 | 0.0054 | 2026-10-29 | The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with si | |
CVE-2026-11979 |
low | 1.8 | 0.0015 | 2026-10-29 | libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility w | |
CVE-2026-41992 |
medium | 6.9 | 0.0062 | 2026-10-29 | GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic ca | |
CVE-2026-41991 |
low | 2.0 | 0.0012 | 2026-10-29 | GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file | |
CVE-2026-13564 |
high | 7.4 | 0.0080 | 2026-10-29 | A vulnerability was found in Edimax EW-7478APC 1.04. Affected is the function formPPPoESet | |
CVE-2026-13563 |
high | 7.4 | 0.0080 | 2026-10-29 | A vulnerability has been found in Edimax EW-7478APC 1.04. This impacts the function formL2 | |
CVE-2026-13562 |
high | 7.4 | 0.0080 | 2026-10-29 | A flaw has been found in Edimax EW-7478APC 1.04. This affects the function formiNICSiteSur | |
CVE-2026-13561 |
low | 2.1 | 0.0238 | 2026-10-29 | A vulnerability was detected in Edimax EW-7478APC 1.04. The impacted element is the functi | |
CVE-2026-13560 |
low | 2.1 | 0.0238 | 2026-10-29 | A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element | |
CVE-2026-13559 |
medium | 5.5 | 0.0043 | 2026-10-29 | A weakness has been identified in code-projects Real State Services 1.0. Impacted is an un | |
CVE-2026-13558 |
low | 2.0 | 0.0035 | 2026-10-29 | A security flaw has been discovered in CodeAstro Complaint Management System 1.0. This iss | |
CVE-2026-57346 |
high | 7.1 | 0.0041 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-25707 |
high | 8.8 | 0.0060 | 2026-10-29 | A relative path traversal bug problem when processing repository metadata in libzypp befor | |
CVE-2026-13557 |
low | 2.1 | 0.0047 | 2026-10-29 | A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vu | |
CVE-2026-13556 |
low | 2.1 | 0.0047 | 2026-10-29 | A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This af | |
CVE-2026-13555 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in itsourcecode Online Hotel Management System 1.0. Affected by | |
CVE-2026-13554 |
low | 2.1 | 0.0047 | 2026-10-29 | A vulnerability has been found in itsourcecode Online Hotel Management System 1.0. Affecte | |
CVE-2026-13553 |
medium | 5.5 | 0.0050 | 2026-10-29 | A flaw has been found in itsourcecode Online Hotel Management System 1.0. Affected is an u | |
CVE-2026-13552 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impa | |
CVE-2026-9267 |
medium | 6.9 | 0.0027 | 2026-10-29 | Eclipse tinydtls before commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221 contains an out-of | |
CVE-2026-57676 |
medium | 4.3 | 0.0029 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in Matteo Manna Simple User | |
CVE-2026-22078 |
high | 7.3 | 0.0012 | 2026-10-29 | Because O+ Connect's IPC service does not authenticate clients, external applications can | |
CVE-2026-13551 |
medium | 5.5 | 0.0043 | 2026-10-29 | A security vulnerability has been detected in itsourcecode Baptism Information Management | |
CVE-2026-13550 |
medium | 5.5 | 0.0043 | 2026-10-29 | A weakness has been identified in itsourcecode Baptism Information Management System 1.0. |