Browse All CVEs
48,523 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-1677 |
medium | 5.3 | 0.0024 | 2026-10-29 | Zephyr sockets created with `IPPROTO_TLS_1_3` can still negotiate a TLS 1.2 connection whe | |
CVE-2026-5084 |
medium | 6.5 | 0.0033 | 2026-10-29 | WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely. T | |
CVE-2026-41018 |
medium | 6.5 | 0.0041 | 2026-10-29 | The Elasticsearch logging provider, when configured with a `host` URL that embeds credenti | |
CVE-2026-43826 |
medium | 6.5 | 0.0041 | 2026-10-29 | The OpenSearch logging provider, when configured with a `host` URL that embeds credentials | |
CVE-2026-26946 |
medium | 6.7 | 0.0010 | 2026-10-29 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, | |
CVE-2026-32658 |
high | 8.8 | 0.0024 | 2026-10-29 | Dell Automation Platform versions prior to 2.0.0.0, contains a missing authorization vulne | |
CVE-2026-35157 |
critical | 9.8 | 0.0032 | 2026-10-29 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, | |
CVE-2026-40636 |
high | 7.8 | 0.0022 | 2026-10-29 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, | |
CVE-2026-4802 |
high | 8.0 | 0.0102 | 2026-10-29 | 1 PoC | A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitr |
CVE-2025-61312 |
high | 7.3 | 0.0029 | 2026-10-29 | A reflected cross-site scripted (XSS) vulnerability in the acc-menu_pricess.php component | |
CVE-2025-61313 |
high | 7.3 | 0.0029 | 2026-10-29 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_markeralerts.php compo | |
CVE-2025-61314 |
high | 7.3 | 0.0029 | 2026-10-29 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_orderopt.php component | |
CVE-2025-65415 |
medium | 5.4 | 0.0022 | 2026-10-29 | docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack vi | |
CVE-2025-65416 |
medium | 6.3 | 0.0027 | 2026-10-29 | docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pm | |
CVE-2025-65417 |
medium | 6.1 | 0.0024 | 2026-10-29 | docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scrip | |
CVE-2025-65418 |
high | 7.5 | 0.0064 | 2026-10-29 | docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowi | |
CVE-2026-34086 |
low | 2.1 | 0.0024 | 2026-10-29 | Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * | |
CVE-2026-34087 |
medium | 5.1 | 0.0027 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-34088 |
low | 1.3 | 0.0029 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-34089 |
low | 2.3 | 0.0035 | 2026-10-29 | Vulnerability in Wikimedia Foundation Scribunto. This issue affects Scribunto: from 1.45. | |
CVE-2026-34090 |
medium | 4.8 | 0.0028 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-34091 |
medium | 5.5 | 0.0029 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-34092 |
low | 2.1 | 0.0024 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-3319 |
medium | 5.1 | 0.0032 | 2026-10-29 | Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce pl | |
CVE-2026-3320 |
medium | 5.1 | 0.0032 | 2026-10-29 | Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce pl | |
CVE-2026-42607 |
critical | 9.1 | 0.0438 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with admin | |
CVE-2026-42608 |
high | 8.8 | 0.0060 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, there is a Path Traversal vulner | |
CVE-2026-42609 |
high | 8.1 | 0.0046 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a business logic vulnerability i | |
CVE-2026-42610 |
medium | 6.5 | 0.0029 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged user (EX: Conte | |
CVE-2026-42611 |
high | 8.9 | 0.0030 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged (with the abili | |
CVE-2026-42612 |
medium | 5.4 | 0.0024 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a stored Cross-Site Scripting (X | |
CVE-2026-42613 |
critical | 9.4 | 0.0114 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, the Login::register() method in | |
CVE-2026-42841 |
medium | 6.9 | 0.0042 | 2026-10-29 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with page | |
CVE-2026-44643 |
critical | 9.3 | 0.0048 | 2026-10-29 | Angular Expressions provides expressions for the Angular.JS web framework as a standalone | |
CVE-2026-6093 |
medium | 6.0 | 0.0028 | 2026-10-29 | Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend | |
CVE-2026-7813 |
critical | 9.4 | 0.0046 | 2026-10-29 | Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Sha | |
CVE-2026-7814 |
medium | 4.8 | 0.0016 | 2026-10-29 | Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visu | |
CVE-2026-7815 |
high | 8.7 | 0.0046 | 2026-10-29 | SQL injection vulnerability in pgAdmin 4 Maintenance Tool. Four user-supplied JSON fields | |
CVE-2026-7816 |
high | 8.7 | 0.0144 | 2026-10-29 | OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export. User | |
CVE-2026-7817 |
high | 7.1 | 0.0022 | 2026-10-29 | Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdm | |
CVE-2026-7818 |
high | 7.3 | 0.0013 | 2026-10-29 | Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager. The se | |
CVE-2026-7819 |
high | 7.2 | 0.0032 | 2026-10-29 | Symbolic-link path traversal (CWE-61, CWE-22) in pgAdmin 4 File Manager. check_access_per | |
CVE-2026-7820 |
medium | 6.9 | 0.0021 | 2026-10-29 | Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4. pgAdmin | |
CVE-2026-33356 |
high | 7.7 | 0.0027 | 2026-10-29 | In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privile | |
CVE-2026-33357 |
high | 7.5 | 0.0024 | 2026-10-29 | In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5.0 build 22 | |
CVE-2026-33359 |
high | 7.5 | 0.0029 | 2026-10-29 | In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service ve | |
CVE-2026-33361 |
high | 7.5 | 0.0017 | 2026-10-29 | In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220 | |
CVE-2026-33362 |
high | 8.6 | 0.0024 | 2026-10-29 | In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), | |
CVE-2026-42349 |
high | 7.6 | 0.0025 | 2026-10-29 | Clerk JavaScript is the official JavaScript repository for Clerk authentication. has(), au | |
CVE-2026-42603 |
high | 8.8 | 0.0025 | 2026-10-29 | OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, |