Browse All CVEs
46,658 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40284 |
medium | 6.8 | 0.0023 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored | |
CVE-2026-40285 |
high | 8.8 | 0.0032 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Versions prior to 3.6.10 contain a SQL | |
CVE-2026-40286 |
high | 7.5 | 0.0021 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored | |
CVE-2026-40299 |
medium | 6.9 | 0.0034 | 2026-10-29 | next-intl provides internationalization for Next.js. Applications using the `next-intl` mi | |
CVE-2026-40301 |
medium | 4.7 | 0.0032 | 2026-10-29 | DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.10, DOMSanit | |
CVE-2026-40302 |
medium | 6.1 | 0.0021 | 2026-10-29 | zrok is software for sharing web services, files, and network resources. Prior to version | |
CVE-2026-40303 |
high | 7.5 | 0.0045 | 2026-10-29 | zrok is software for sharing web services, files, and network resources. Prior to version | |
CVE-2026-40527 |
high | 8.5 | 0.0092 | 2026-10-29 | radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afs | |
CVE-2026-40258 |
critical | 9.1 | 0.0040 | 2026-10-29 | The Gramps Web API is a Python REST API for the genealogical research software Gramps. Ver | |
CVE-2026-40304 |
medium | 5.3 | 0.0029 | 2026-10-29 | zrok is software for sharing web services, files, and network resources. Prior to version | |
CVE-2026-40305 |
medium | 4.3 | 0.0018 | 2026-10-29 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the M | |
CVE-2026-40306 |
medium | 6.9 | 0.0018 | 2026-10-29 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the M | |
CVE-2026-40321 |
high | 8.0 | 0.0641 | 2026-10-29 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the M | |
CVE-2026-40351 |
critical | 9.8 | 0.0063 | 2026-10-29 | FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-base | |
CVE-2026-40352 |
high | 8.8 | 0.0038 | 2026-10-29 | FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password chan | |
CVE-2026-40476 |
medium | 6.9 | 0.0085 | 2026-10-29 | graphql-go is a Go implementation of GraphQL. In versions 15.31.4 and below, the Overlappi | |
CVE-2026-40477 |
— | — | 0.0085 | 2026-10-29 | Thymeleaf is a server-side Java template engine for web and standalone environments. Versi | |
CVE-2026-40478 |
— | — | 0.0110 | 2026-10-29 | Thymeleaf is a server-side Java template engine for web and standalone environments. Versi | |
CVE-2026-5720 |
high | 7.1 | 0.0067 | 2026-10-29 | miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that al | |
CVE-2026-40323 |
high | 8.9 | 0.0019 | 2026-10-29 | SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs comp | |
CVE-2026-40324 |
critical | 9.1 | 0.0090 | 2026-10-29 | Hot Chocolate is an open-source GraphQL server. Prior to versions 12.22.7, 13.9.16, 14.3.1 | |
CVE-2026-40333 |
medium | 6.1 | 0.0022 | 2026-10-29 | libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, | |
CVE-2026-40334 |
low | 3.5 | 0.0019 | 2026-10-29 | libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, | |
CVE-2026-40335 |
medium | 5.2 | 0.0020 | 2026-10-29 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 hav | |
CVE-2026-40336 |
low | 2.4 | 0.0018 | 2026-10-29 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 hav | |
CVE-2026-40337 |
medium | 5.1 | 0.0015 | 2026-10-29 | The Sentry kernel is a high security level micro-kernel implementation made for high secur | |
CVE-2026-40338 |
medium | 5.2 | 0.0020 | 2026-10-29 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 hav | |
CVE-2026-40339 |
medium | 5.2 | 0.0020 | 2026-10-29 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 hav | |
CVE-2026-40340 |
medium | 6.1 | 0.0022 | 2026-10-29 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 hav | |
CVE-2026-40341 |
low | 3.5 | 0.0019 | 2026-10-29 | libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, | |
CVE-2026-40346 |
medium | 6.4 | 0.0038 | 2026-10-29 | NocoBase is an AI-powered no-code/low-code platform for building business applications and | |
CVE-2026-40347 |
medium | 5.3 | 0.0035 | 2026-10-29 | Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have | |
CVE-2026-40348 |
high | 7.7 | 0.0038 | 2026-10-29 | Movary is a self hosted web app to track and rate a user's watched movies. Prior to versio | |
CVE-2026-40349 |
high | 8.8 | 0.0053 | 2026-10-29 | Movary is a self hosted web app to track and rate a user's watched movies. Prior to versio | |
CVE-2026-40480 |
high | 7.1 | 0.0040 | 2026-10-29 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the GET | |
CVE-2026-40482 |
high | 7.1 | 0.0031 | 2026-10-29 | ChurchCRM is an open-source church management system. Versions prior to 7.2.0 have SQL inj | |
CVE-2026-40483 |
medium | 5.4 | 0.0022 | 2026-10-29 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the Pled | |
CVE-2026-40484 |
critical | 9.1 | 0.0087 | 2026-10-29 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the data | |
CVE-2026-40485 |
medium | 5.3 | 0.0034 | 2026-10-29 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the publ | |
CVE-2026-40581 |
high | 8.1 | 0.0020 | 2026-10-29 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the fami | |
CVE-2026-40582 |
critical | 9.1 | 0.0050 | 2026-10-29 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the /api | |
CVE-2026-40593 |
medium | 4.8 | 0.0020 | 2026-10-29 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the User | |
CVE-2026-35465 |
high | 7.5 | 0.0044 | 2026-10-29 | SecureDrop Client is a desktop app for journalists to securely communicate with sources an | |
CVE-2026-40317 |
critical | 9.3 | 0.0022 | 2026-10-29 | NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions p | |
CVE-2026-40350 |
high | 8.8 | 0.0044 | 2026-10-29 | Movary is a self hosted web app to track and rate a user's watched movies. Prior to versio | |
CVE-2026-40572 |
critical | 9.0 | 0.0021 | 2026-10-29 | NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions p | |
CVE-2026-35582 |
high | 8.8 | 0.0086 | 2026-10-29 | Emissary is a P2P based data-driven workflow engine. In versions 8.42.0 and below, Executr | |
CVE-2026-40487 |
critical | 9.0 | 0.0022 | 2026-10-29 | Postiz is an AI social media scheduling tool. Prior to version 2.21.6, a file upload valid | |
CVE-2026-40489 |
high | 8.6 | 0.0015 | 2026-10-29 | editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorC | |
CVE-2026-40491 |
high | 7.8 | 0.0057 | 2026-10-29 | gdown is a Google Drive public file/folder downloader. Versions prior to 5.2.2 are vulnera |