Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-13487 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Af | |
CVE-2026-13486 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.p | |
CVE-2026-13485 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This af | |
CVE-2026-13483 |
low | 1.3 | 0.0013 | 2026-10-29 | A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function | |
CVE-2026-13482 |
low | 2.9 | 0.0028 | 2026-10-29 | A vulnerability was detected in skypilot-org skypilot up to 0.12.0. Impacted is the functi | |
CVE-2026-10646 |
high | 7.4 | 0.0045 | 2026-10-29 | Zephyr's BSD-sockets getaddrinfo() implementation (subsys/net/lib/sockets/getaddrinfo.c) p | |
CVE-2026-10644 |
medium | 4.2 | 0.0022 | 2026-10-29 | The Microchip SERCOM-G1 UART driver (drivers/serial/uart_mchp_sercom_g1.c), used by the PI | |
CVE-2026-10593 |
medium | 6.5 | 0.0035 | 2026-10-29 | The Zephyr Bluetooth LE Audio Basic Audio Profile (BAP) unicast client mishandles peer-sup | |
CVE-2026-58058 |
medium | 6.9 | 0.0145 | 2026-10-29 | Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet | |
CVE-2026-58057 |
medium | 5.0 | 0.0156 | 2026-10-29 | 1 PoC | Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist u |
CVE-2026-58056 |
high | 7.2 | 0.0033 | 2026-10-29 | RustDesk gates incoming control messages on per-capability flags rather than on the sessio | |
CVE-2026-58055 |
medium | 6.3 | 0.0025 | 2026-10-29 | nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carr | |
CVE-2026-58053 |
critical | 9.4 | 0.0044 | 2026-10-29 | Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's contain | |
CVE-2026-58051 |
high | 8.3 | 0.0029 | 2026-10-29 | libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initia | |
CVE-2026-58050 |
high | 8.3 | 0.0044 | 2026-10-29 | libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publicke | |
CVE-2026-10643 |
high | 8.7 | 0.0018 | 2026-10-29 | Zephyr's IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert | |
CVE-2026-12471 |
medium | 4.3 | 0.0034 | 2026-10-29 | The Spexo theme for WordPress is vulnerable to unauthorized access due to a missing capabi | |
CVE-2023-37524 |
high | 7.8 | 0.0027 | 2026-10-29 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Fr | |
CVE-2026-56414 |
high | 8.6 | 0.0039 | 2026-10-29 | A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow au | |
CVE-2026-55975 |
high | 8.6 | 0.0063 | 2026-10-29 | A vulnerability exists in H.View IP cameras that could allow an authenticated user to supp | |
CVE-2026-55069 |
high | 8.7 | 0.0024 | 2026-10-29 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulne | |
CVE-2026-53577 |
medium | 6.5 | 0.0044 | 2026-10-29 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, | |
CVE-2026-53576 |
critical | 10.0 | 0.0330 | 2026-10-29 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, | |
CVE-2026-49869 |
critical | 10.0 | 0.0209 | 2026-10-29 | KEV | Kestra OSS contains an OS command injection vulnerability that could allow an unauthentica |
CVE-2026-45807 |
high | 7.7 | 0.0057 | 2026-10-29 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.43 and 1.3.19, | |
CVE-2026-36478 |
high | 7.5 | 0.0055 | 2026-10-29 | An issue in Technitium DNS Server v.14.3 and before allows a remote attacker to cause a de | |
CVE-2026-46604 |
high | 7.5 | 0.0061 | 2026-10-29 | The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offs | |
CVE-2026-52785 |
critical | 9.9 | 0.0038 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17. | |
CVE-2026-52784 |
high | 8.8 | 0.0024 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17. | |
CVE-2026-52783 |
high | 8.2 | 0.0020 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17. | |
CVE-2026-52782 |
critical | 9.9 | 0.0045 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17. | |
CVE-2026-52781 |
medium | 6.4 | 0.0025 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17. | |
CVE-2026-52780 |
critical | 9.6 | 0.0039 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17. | |
CVE-2026-52779 |
medium | 5.4 | 0.0022 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17. | |
CVE-2026-49355 |
medium | 4.3 | 0.0029 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.4.0, `GET / | |
CVE-2026-47193 |
high | 7.5 | 0.0031 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17. | |
CVE-2026-46386 |
critical | 9.9 | 0.0049 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to , the official | |
CVE-2026-44736 |
medium | 6.5 | 0.0036 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.4.0, the GE | |
CVE-2026-44735 |
medium | 6.5 | 0.0037 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17. | |
CVE-2026-44734 |
medium | 6.5 | 0.0033 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17. | |
CVE-2026-44733 |
medium | 5.9 | 0.0028 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17. | |
CVE-2026-44732 |
medium | 4.3 | 0.0028 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17. | |
CVE-2026-44731 |
medium | 4.3 | 0.0029 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17. | |
CVE-2026-44696 |
medium | 5.7 | 0.0025 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to 17.4.0, OpenPr | |
CVE-2026-32833 |
high | 8.7 | 0.0242 | 2026-10-29 | Cudy LT300 3.0 running firmware prior to version 2.5.12 contains an OS command injection v | |
CVE-2026-29509 |
medium | 5.3 | 0.0037 | 2026-10-29 | Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function | |
CVE-2026-54753 |
medium | 5.9 | 0.0144 | 2026-10-29 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 17.0.4 until 22.7.2 | |
CVE-2026-48090 |
medium | 5.9 | 0.0058 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-47220 |
— | — | 0.0066 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-47205 |
medium | 5.9 | 0.0039 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro |