Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-54679 |
medium | 6.9 | 0.0015 | 2026-10-29 | jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvp_string_append ha | |
CVE-2026-49839 |
high | 7.1 | 0.0016 | 2026-10-29 | jq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can turn a handled ove | |
CVE-2026-47770 |
medium | 6.8 | 0.0015 | 2026-10-29 | jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nes | |
CVE-2026-55439 |
medium | 5.5 | 0.0041 | 2026-10-29 | Halo is an open source website building tool. Prior to 2.24.3, a path traversal vulnerabil | |
CVE-2026-55413 |
critical | 9.4 | 0.0032 | 2026-10-29 | ToolJet is the open-source foundation am AI-native platform for building and deploying int | |
CVE-2026-55092 |
high | 7.0 | 0.0044 | 2026-10-29 | Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it use | |
CVE-2026-54448 |
medium | 6.9 | 0.0044 | 2026-10-29 | Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive (.tgz) | |
CVE-2026-54040 |
high | 7.1 | 0.0026 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-54037 |
medium | 6.5 | 0.0051 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-54033 |
medium | 6.5 | 0.0035 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-54030 |
critical | 9.3 | 0.0017 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.5 | |
CVE-2026-54029 |
medium | 6.5 | 0.0027 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-54027 |
medium | 6.5 | 0.0032 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-54025 |
medium | 5.4 | 0.0024 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-54024 |
medium | 6.5 | 0.0044 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-45233 |
high | 7.2 | 0.0090 | 2026-10-29 | HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged | |
CVE-2026-13351 |
high | 7.5 | 0.0049 | 2026-10-29 | Zephyr's IPv6 network stack can be prevented from receiving or processing future incoming | |
CVE-2026-13350 |
low | 2.3 | 0.0027 | 2026-10-29 | Permissions where checked incorrectly during room creation, allowing attackers to create r | |
CVE-2026-9718 |
medium | 6.9 | 0.0043 | 2026-10-29 | CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacke | |
CVE-2026-9717 |
high | 8.6 | 0.0173 | 2026-10-29 | CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') v | |
CVE-2026-9716 |
high | 8.7 | 0.0046 | 2026-10-29 | CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service | |
CVE-2026-57438 |
low | 2.2 | 0.0013 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-55477 |
high | 7.2 | 0.0062 | 2026-10-29 | 3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authentica | |
CVE-2026-54036 |
high | 8.1 | 0.0038 | 2026-10-29 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4 | |
CVE-2026-4522 |
medium | 6.7 | 0.0019 | 2026-10-29 | Missing authentication for critical function vulnerability in HYPR Passwordless on Windows | |
CVE-2026-48946 |
medium | 6.3 | 0.0028 | 2026-10-29 | The K2 frontend article-attachment upload path accepts files whose extension is `.php`, an | |
CVE-2026-48945 |
medium | 5.3 | 0.0033 | 2026-10-29 | The K2 article gallery upload path accepts a zip/tar archive, extracts it under `/media/k2 | |
CVE-2026-48944 |
medium | 6.5 | 0.0044 | 2026-10-29 | The K2 frontend article-save handler accepts an `attachment[N][existing]` POST field that | |
CVE-2026-48943 |
medium | 6.5 | 0.0030 | 2026-10-29 | K2 ≤ 2.24 contains a mass-assignment defect in the K2 system user plugin `plg_user_k2`. A | |
CVE-2026-48942 |
medium | 6.1 | 0.0025 | 2026-10-29 | K2 ≤ 2.26 renders the `#__k2_users.image` column directly into HTML `src` attributes via t | |
CVE-2026-48941 |
medium | 6.5 | 0.0027 | 2026-10-29 | The K2 frontend `item.checkin` task accepts an unauthenticated `sigProFolder` query parame | |
CVE-2026-48940 |
low | 3.4 | 0.0028 | 2026-10-29 | A Joomla user with K2 "create item" rights (Author tier by default) can submit an article | |
CVE-2026-12844 |
high | 7.5 | 0.0066 | 2026-10-29 | List::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairw | |
CVE-2026-6432 |
medium | 5.3 | 0.0060 | 2026-10-29 | Improper bounds validation in the ZAP command parser of EmberZNet SDK versions 8.0.0 throu | |
CVE-2026-57588 |
low | 1.8 | 0.0033 | 2026-10-29 | A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan resul | |
CVE-2026-57587 |
low | 2.9 | 0.0045 | 2026-10-29 | A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who cont | |
CVE-2026-57536 |
medium | 6.3 | 0.0033 | 2026-10-29 | Our payment integration with Mollie did not properly validate payment status responses. A | |
CVE-2026-57534 |
low | 2.1 | 0.0043 | 2026-10-29 | Malicious HTML content could be injected into the content of a page in the pretix-pages pl | |
CVE-2026-57437 |
low | 1.7 | 0.0040 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-57436 |
low | 1.7 | 0.0040 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-57435 |
low | 1.7 | 0.0046 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-57434 |
low | 1.7 | 0.0046 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-57236 |
low | 1.7 | 0.0043 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-57235 |
medium | 6.3 | 0.0043 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-57234 |
low | 2.6 | 0.0020 | 2026-10-29 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior t | |
CVE-2026-49319 |
medium | 6.9 | 0.0030 | 2026-10-29 | Remote Keyless Entry System (RKES), using the 433 MHz key fob bearing FCC ID CWTR53R0 manu | |
CVE-2026-46735 |
high | 7.8 | 0.0082 | 2026-10-29 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper | |
CVE-2026-13314 |
low | 2.0 | 0.0043 | 2026-10-29 | Malicious HTML content could be injected into the content rendered by the pretix-digital p | |
CVE-2026-13223 |
medium | 6.3 | 0.0033 | 2026-10-29 | Our payment integration with Computop-based payment methods did not properly validate pay | |
CVE-2026-13222 |
medium | 6.3 | 0.0033 | 2026-10-29 | Our payment integration with Oppwa-based payment methods did not properly validate paymen |