Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-13372 |
high | 7.2 | 0.0050 | 2026-10-29 | Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutio | |
CVE-2026-56876 |
high | 8.6 | 0.0053 | 2026-10-29 | extract-zip does not validate symlink targets when extracting zip archives. When processin | |
CVE-2026-55448 |
medium | 6.3 | 0.0020 | 2026-10-29 | mise manages dev tools like node, python, cmake, and terraform. From 2026.3.15 until 2026. | |
CVE-2026-55441 |
high | 8.6 | 0.0018 | 2026-10-29 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's | |
CVE-2026-54557 |
medium | 5.5 | 0.0018 | 2026-10-29 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.1, the mis | |
CVE-2026-54341 |
high | 7.5 | 0.0050 | 2026-10-29 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39 | |
CVE-2026-48743 |
high | 7.5 | 0.0030 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Pri | |
CVE-2026-48706 |
high | 7.5 | 0.0061 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-48497 |
high | 7.5 | 0.0040 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Pri | |
CVE-2026-48044 |
high | 7.5 | 0.0049 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-48042 |
high | 7.5 | 0.0056 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Pri | |
CVE-2026-47778 |
medium | 4.4 | 0.0021 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Pri | |
CVE-2026-47775 |
medium | 6.8 | 0.0022 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Pri | |
CVE-2026-47692 |
medium | 4.3 | 0.0022 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-47221 |
high | 7.5 | 0.0044 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-47207 |
medium | 6.5 | 0.0044 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-47206 |
low | 2.3 | 0.0036 | 2026-10-29 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39 | |
CVE-2026-47204 |
high | 7.5 | 0.0045 | 2026-10-29 | Envoy is an open source edge and service proxy designed for cloud-native applications. Fro | |
CVE-2026-33646 |
critical | 9.6 | 0.0046 | 2026-10-29 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise p | |
CVE-2026-57231 |
high | 7.5 | 0.0044 | 2026-10-29 | Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container | |
CVE-2026-56823 |
medium | 5.4 | 0.0025 | 2026-10-29 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous | |
CVE-2026-56663 |
high | 8.5 | 0.0028 | 2026-10-29 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous | |
CVE-2026-55686 |
medium | 5.3 | 0.0040 | 2026-10-29 | Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a m | |
CVE-2026-55677 |
high | 7.5 | 0.0052 | 2026-10-29 | Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handl | |
CVE-2026-48529 |
medium | 6.0 | 0.0017 | 2026-10-29 | GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running i | |
CVE-2026-28385 |
medium | 5.0 | 0.0028 | 2026-10-29 | In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery (SSRF) vulnerabi | |
CVE-2026-13434 |
medium | 4.9 | 0.0024 | 2026-10-29 | A flaw was found in KubeVirt's network annotation generator. When a tenant creates a Virtu | |
CVE-2026-9640 |
high | 7.2 | 0.0063 | 2026-10-29 | A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21 | |
CVE-2026-9639 |
medium | 6.5 | 0.0055 | 2026-10-29 | Nil-pointer dereference in CreateCustomVolumeFromBackup in LXD up to version 6.8 and 5.21 | |
CVE-2026-5757 |
high | 7.5 | 0.0073 | 2026-10-29 | Unauthenticated remote information disclosure vulnerability in Ollama's model quantization | |
CVE-2026-47214 |
high | 7.1 | 0.0037 | 2026-10-29 | Docling simplifies document processing by parsing diverse formats and providing integratio | |
CVE-2026-45195 |
high | 7.8 | 0.0014 | 2026-10-29 | Kernel software installed and running inside a Host VM may post improper commands to the G | |
CVE-2026-44018 |
high | 7.1 | 0.0016 | 2026-10-29 | Docling simplifies document processing by parsing diverse formats and providing integratio | |
CVE-2026-21734 |
high | 7.7 | 0.0016 | 2026-10-29 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process a | |
CVE-2026-12411 |
critical | 9.6 | 0.0024 | 2026-10-29 | Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows | |
CVE-2026-0828 |
high | 7.5 | 0.0054 | 2026-10-29 | Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versions 10.5.7 | |
CVE-2026-0685 |
critical | 9.8 | 0.0093 | 2026-10-29 | Server side template inject (SSTI) in the expression evaluation component in Genshi Templa | |
CVE-2026-57667 |
high | 8.5 | 0.0036 | 2026-10-29 | Sales Representative SQL Injection in Groundhogg <= 4.5 versions. | |
CVE-2026-57665 |
medium | 5.3 | 0.0031 | 2026-10-29 | Unauthenticated Insecure Direct Object References (IDOR) in GravityView <= 3.0.0 versions. | |
CVE-2026-57664 |
medium | 4.3 | 0.0029 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1. | |
CVE-2026-57663 |
high | 8.5 | 0.0036 | 2026-10-29 | Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 ver | |
CVE-2026-57662 |
high | 8.5 | 0.0036 | 2026-10-29 | Contributor SQL Injection in Contest Gallery <= 30.0.0 versions. | |
CVE-2026-57661 |
medium | 5.4 | 0.0029 | 2026-10-29 | Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions. | |
CVE-2026-57660 |
medium | 5.3 | 0.0029 | 2026-10-29 | Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions. | |
CVE-2026-57659 |
high | 8.8 | 0.0020 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Paid Memberships Pro - Add Member Fro | |
CVE-2026-57657 |
medium | 4.3 | 0.0014 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Gmail SMTP <= 1.2.3.19 versions. | |
CVE-2026-57656 |
medium | 5.9 | 0.0024 | 2026-10-29 | Author Cross Site Scripting (XSS) in Hester Core <= 1.1.8 versions. | |
CVE-2026-57655 |
high | 8.2 | 0.0017 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Child Theme Wizard <= 1.4 versions. | |
CVE-2026-57654 |
medium | 6.5 | 0.0030 | 2026-10-29 | Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions. | |
CVE-2026-57653 |
high | 8.5 | 0.0036 | 2026-10-29 | Contributor SQL Injection in WP Job Portal <= 2.5.2 versions. |