Browse All CVEs
34,247 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-115943 |
— | — | 0.0025 | 2026-10-29 | Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of nu | |
CVE-2026-107176 |
medium | 6.8 | 0.0027 | 2026-10-29 | A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader | |
CVE-2026-119317 |
medium | 6.0 | 0.0020 | 2026-10-29 | On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could rea | |
CVE-2026-45049 |
high | 8.3 | 0.0033 | 2026-10-29 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cr | |
CVE-2026-119282 |
high | 7.3 | 0.0014 | 2026-10-29 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 | |
CVE-2026-119283 |
high | 7.5 | 0.0023 | 2026-10-29 | joserfc is a Python library that provides an implementation of several JSON Object Signing | |
CVE-2026-61671 |
high | 8.1 | 0.0016 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to the advisory's stated patched | |
CVE-2026-61673 |
medium | 6.3 | 0.0033 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-sit | |
CVE-2026-61645 |
critical | 9.1 | 0.0041 | 2026-10-29 | Docat is a tool for hosting versioned static documentation. In the affected implementation | |
CVE-2026-61654 |
high | 8.3 | 0.0038 | 2026-10-29 | Lightdash is an open source business intelligence platform. In affected versions through 0 | |
CVE-2026-61707 |
critical | 9.0 | 0.0024 | 2026-10-29 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-61719 |
high | 8.9 | 0.0024 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored cross-site sc | |
CVE-2026-119281 |
medium | 5.9 | 0.0028 | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-13303 |
high | 8.7 | 0.0022 | 2026-10-29 | HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery | |
CVE-2026-61576 |
high | 8.3 | 0.0045 | 2026-10-29 | Lightdash is an open source business intelligence platform. In affected versions through 0 | |
CVE-2026-119203 |
high | 7.1 | 0.0030 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter | |
CVE-2026-119207 |
high | 7.1 | 0.0030 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consum | |
CVE-2026-119325 |
high | 7.5 | 0.0024 | 2026-10-29 | Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access contro | |
CVE-2026-119205 |
high | 7.1 | 0.0030 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter | |
CVE-2026-119206 |
high | 7.1 | 0.0030 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take e | |
CVE-2026-119204 |
high | 7.1 | 0.0030 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can consum | |
CVE-2026-119209 |
high | 7.1 | 0.0027 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consum | |
CVE-2026-119208 |
high | 7.1 | 0.0030 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consum | |
CVE-2026-119277 |
medium | 5.9 | 0.0035 | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-119278 |
medium | 5.9 | 0.0036 | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-119210 |
medium | 5.9 | 0.0030 | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-119276 |
medium | 5.9 | 0.0035 | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-119280 |
low | 3.7 | 0.0031 | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-119279 |
medium | 5.9 | 0.0035 | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-110073 |
medium | 5.4 | 0.0036 | 2026-10-29 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability | |
CVE-2026-110074 |
medium | 5.4 | 0.0019 | 2026-10-29 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerabili | |
CVE-2026-119198 |
medium | 5.9 | 0.0029 | 2026-10-29 | Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, a cli | |
CVE-2026-119199 |
medium | 5.9 | 0.0035 | 2026-10-29 | Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the N | |
CVE-2026-93588 |
low | 2.3 | 0.0027 | 2026-10-29 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in th | |
CVE-2026-93589 |
medium | 6.3 | 0.0034 | 2026-10-29 | ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF enc | |
CVE-2026-93586 |
low | 2.1 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability i | |
CVE-2026-93587 |
medium | 4.8 | 0.0012 | 2026-10-29 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD (and, | |
CVE-2026-92587 |
medium | 5.3 | 0.0031 | 2026-10-29 | n8n is a workflow automation platform. In versions before 1.123.76, 2.37.7, and 2.38.2, th | |
CVE-2026-92588 |
medium | 5.9 | 0.0032 | 2026-10-29 | n8n is a workflow automation platform. In n8n versions before 1.123.76, 2.37.7, and 2.38.2 | |
CVE-2026-90931 |
medium | 5.1 | 0.0024 | 2026-10-29 | 1 PoC | LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media |
CVE-2026-90932 |
high | 8.6 | 0.0082 | 2026-10-29 | 1 PoC | LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the c |
CVE-2026-86424 |
low | 2.0 | 0.0014 | 2026-10-29 | ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vu | |
CVE-2026-86425 |
medium | 4.8 | 0.0015 | 2026-10-29 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vuln | |
CVE-2026-86422 |
low | 1.0 | 0.0013 | 2026-10-29 | ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path pol | |
CVE-2026-86423 |
medium | 4.8 | 0.0011 | 2026-10-29 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vuln | |
CVE-2026-86420 |
medium | 6.3 | 0.0032 | 2026-10-29 | ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when a | |
CVE-2026-86421 |
medium | 6.3 | 0.0045 | 2026-10-29 | ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. | |
CVE-2026-85172 |
medium | 5.3 | 0.0026 | 2026-10-29 | n8n versions before 2.34.1 contain a server-side request forgery vulnerability in the lega | |
CVE-2026-85173 |
medium | 5.3 | 0.0035 | 2026-10-29 | n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in th | |
CVE-2026-85170 |
high | 7.1 | 0.0040 | 2026-10-29 | n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail (v1) an |