Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-56405 |
medium | 6.9 | 0.0014 | 2026-10-29 | libexpat before 2.8.2 has an integer overflow in getAttributeId. | |
CVE-2026-56404 |
medium | 6.9 | 0.0015 | 2026-10-29 | libexpat before 2.8.2 has an integer overflow in addBinding. | |
CVE-2026-56403 |
medium | 6.9 | 0.0018 | 2026-10-29 | libexpat before 2.8.2 has an integer overflow in storeAtts. | |
CVE-2026-56394 |
high | 7.1 | 0.0049 | 2026-10-29 | Craft CMS from 4.0.0-RC1 contains an authenticated path traversal vulnerability in the ass | |
CVE-2026-56393 |
medium | 4.6 | 0.0022 | 2026-10-29 | Craft CMS 4.x (>= 4.0.0-RC1, < 4.17.0-beta.1) and 5.x (>= 5.0.0-RC1, < 5.9.0-beta.1) conta | |
CVE-2026-56385 |
medium | 5.3 | 0.0036 | 2026-10-29 | Craft CMS versions >= 5.0.0-RC1, <= 5.9.13 and >= 4.0.0-RC1, <= 4.17.7 contain an authoriz | |
CVE-2026-56384 |
medium | 5.3 | 0.0033 | 2026-10-29 | Craft CMS contains a missing authorization vulnerability in the assets/preview-thumb endpo | |
CVE-2026-56383 |
medium | 4.6 | 0.0022 | 2026-10-29 | Craft CMS contains a stored cross-site scripting (XSS) vulnerability in the editableTable. | |
CVE-2026-56382 |
high | 8.6 | 0.0068 | 2026-10-29 | Craft CMS (composer package craftcms/cms) versions >= 5.5.0 and <= 5.9.13 contain a remote | |
CVE-2026-56381 |
medium | 4.6 | 0.0018 | 2026-10-29 | Craft CMS from version 5.0.0-RC1 contains a stored cross-site scripting vulnerability in t | |
CVE-2026-56316 |
medium | 6.9 | 0.0031 | 2026-10-29 | Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /bu | |
CVE-2026-56236 |
medium | 6.8 | 0.0018 | 2026-10-29 | Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and b | |
CVE-2026-12799 |
low | 2.1 | 0.0043 | 2026-10-29 | A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by th | |
CVE-2026-12798 |
low | 2.1 | 0.0040 | 2026-10-29 | A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerabi | |
CVE-2026-12797 |
low | 2.1 | 0.0040 | 2026-10-29 | A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the funct | |
CVE-2026-12796 |
low | 2.1 | 0.0057 | 2026-10-29 | A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function | |
CVE-2026-12795 |
medium | 5.5 | 0.0080 | 2026-10-29 | A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function | |
CVE-2026-12789 |
low | 2.0 | 0.0033 | 2026-10-29 | A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affect | |
CVE-2026-12788 |
low | 2.1 | 0.0040 | 2026-10-29 | A vulnerability was determined in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform | |
CVE-2026-12787 |
low | 2.1 | 0.0041 | 2026-10-29 | A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发 | |
CVE-2026-12786 |
high | 7.1 | 0.0016 | 2026-10-29 | A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected | |
CVE-2026-12784 |
high | 7.1 | 0.0016 | 2026-10-29 | A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an | |
CVE-2026-12782 |
high | 7.1 | 0.0016 | 2026-10-29 | A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted el | |
CVE-2026-12781 |
high | 7.1 | 0.0016 | 2026-10-29 | A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element | |
CVE-2026-12780 |
high | 7.1 | 0.0016 | 2026-10-29 | A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown func | |
CVE-2026-12779 |
high | 7.1 | 0.0016 | 2026-10-29 | A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects | |
CVE-2026-12778 |
high | 7.1 | 0.0016 | 2026-10-29 | A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerabil | |
CVE-2026-12776 |
low | 2.1 | 0.0032 | 2026-10-29 | A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268 | |
CVE-2026-12775 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef | |
CVE-2026-12774 |
low | 2.1 | 0.0040 | 2026-10-29 | A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by th | |
CVE-2026-12773 |
medium | 5.5 | 0.0102 | 2026-10-29 | A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function U | |
CVE-2026-12772 |
low | 2.1 | 0.0040 | 2026-10-29 | A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the func | |
CVE-2026-12771 |
low | 1.3 | 0.0043 | 2026-10-29 | A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown fu | |
CVE-2026-12770 |
low | 2.1 | 0.0057 | 2026-10-29 | A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an | |
CVE-2026-56355 |
low | 3.7 | 0.0040 | 2026-10-29 | GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorizati | |
CVE-2026-56347 |
medium | 5.3 | 0.0020 | 2026-10-29 | AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerab | |
CVE-2026-56340 |
high | 8.7 | 0.0064 | 2026-10-29 | vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal em | |
CVE-2026-5366 |
critical | 9.9 | 0.0103 | 2026-10-29 | Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of | |
CVE-2026-56307 |
medium | 5.3 | 0.0028 | 2026-10-29 | Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/ | |
CVE-2026-56235 |
medium | 6.9 | 0.0035 | 2026-10-29 | Cap-go capgo before 12.128.2 contains an authorization bypass in several Supabase PostgRES | |
CVE-2024-58351 |
critical | 9.3 | 0.0066 | 2026-10-29 | Flowise before 2.1.4 allows configuration to be injected into the Chainflow during executi | |
CVE-2026-48939 |
critical | 10.0 | 0.2007 | 2026-10-29 | KEV | iCagenda contains an unrestricted upload of file with dangerous type vulnerability that al |
CVE-2026-48909 |
critical | 9.5 | 0.0494 | 2026-10-29 | SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without | |
CVE-2026-48908 |
critical | 10.0 | 0.8918 | 2026-10-29 | KEV | JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vul |
CVE-2026-9265 |
critical | 9.1 | 0.0063 | 2026-10-29 | Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attr | |
CVE-2026-56082 |
high | 8.7 | 0.0037 | 2026-10-29 | Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in | |
CVE-2026-56081 |
critical | 9.3 | 0.0043 | 2026-10-29 | Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker registe | |
CVE-2026-56080 |
medium | 6.9 | 0.0036 | 2026-10-29 | Capgo before 12.128.2 contains a flaw in the Enforce Password Policy feature: after a Supe | |
CVE-2026-56073 |
critical | 9.3 | 0.0023 | 2026-10-29 | Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verification | |
CVE-2026-50559 |
— | — | 0.0102 | 2026-10-29 | Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37 |