Browse All CVEs
50,426 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-49054 |
medium | 4.3 | 0.0021 | 2026-10-29 | Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Inco | |
CVE-2026-45335 |
medium | 5.4 | 0.0018 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to 3.7.3, an Open Redirect vulne | |
CVE-2026-45027 |
medium | 5.9 | 0.0017 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a use | |
CVE-2026-44483 |
high | 8.2 | 0.0036 | 2026-10-29 | RVF (formerly Remix Validated Form) provides easy form validation and state management for | |
CVE-2026-44475 |
medium | 6.1 | 0.0015 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core does not | |
CVE-2026-44474 |
low | 3.7 | 0.0013 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core didn't en | |
CVE-2026-44473 |
high | 7.1 | 0.0017 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Prior to 1.10.0, a radio with a vali | |
CVE-2026-42790 |
high | 7.6 | 0.0036 | 2026-10-29 | Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and pu | |
CVE-2026-49059 |
medium | 4.7 | 0.0023 | 2026-10-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Facebook Facebook for | |
CVE-2026-49051 |
medium | 4.3 | 0.0022 | 2026-10-29 | Missing Authorization vulnerability in Prasad Kirpekar WP Meta and Date Remover allows Exp | |
CVE-2026-49047 |
medium | 4.3 | 0.0016 | 2026-10-29 | Missing Authorization vulnerability in DearHive DearFlip allows Exploiting Incorrectly Con | |
CVE-2026-49046 |
high | 8.5 | 0.0030 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-49045 |
medium | 4.3 | 0.0021 | 2026-10-29 | Missing Authorization vulnerability in WP Media Adminimize allows Exploiting Incorrectly C | |
CVE-2026-49044 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-48973 |
medium | 4.3 | 0.0020 | 2026-10-29 | Missing Authorization vulnerability in Benbodhi SVG Support allows Exploiting Incorrectly | |
CVE-2026-48926 |
medium | 4.3 | 0.0017 | 2026-10-29 | Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission ch | |
CVE-2026-48917 |
medium | 6.6 | 0.0026 | 2026-10-29 | Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals wi | |
CVE-2026-48916 |
medium | 6.6 | 0.0027 | 2026-10-29 | Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals. | |
CVE-2026-48544 |
high | 8.7 | 0.0052 | 2026-10-29 | Taipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in the Eleme | |
CVE-2026-47119 |
medium | 5.3 | 0.0024 | 2026-10-29 | Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that a | |
CVE-2026-47118 |
high | 7.1 | 0.0037 | 2026-10-29 | Agent Zero before version 1.15 contains a path traversal vulnerability that allows unauthe | |
CVE-2026-44988 |
high | 8.8 | 0.0024 | 2026-10-29 | LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, | |
CVE-2026-44972 |
medium | 5.0 | 0.0011 | 2026-10-29 | GuardDog is a CLI tool to identify malicious PyPI packages. From 2.6.0 to 2.9.0, GuardDog | |
CVE-2026-44971 |
high | 8.2 | 0.0024 | 2026-10-29 | GuardDog is a CLI tool to identify malicious PyPI packages. From 1.0.0 to 2.9.0, the progr | |
CVE-2026-44839 |
medium | 5.6 | 0.0018 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This | |
CVE-2026-44838 |
medium | 5.3 | 0.0020 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. From 4.2.0 to before 4.2.4, RabbitMQ's MQTT | |
CVE-2026-44830 |
high | 8.7 | 0.0022 | 2026-10-29 | Nocturne Memory is a lightweight, rollbackable, and visual Long-Term Memory Server for MCP | |
CVE-2026-42280 |
high | 7.1 | 0.0021 | 2026-10-29 | Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under speci | |
CVE-2026-42184 |
medium | 6.1 | 0.0031 | 2026-10-29 | Tauri is a framework for building binaries for all major desktop platforms. From 2.0 to 2. | |
CVE-2026-9617 |
high | 8.8 | 0.0025 | 2026-10-29 | PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privil | |
CVE-2026-8405 |
medium | 6.5 | 0.0023 | 2026-10-29 | IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protect | |
CVE-2026-7528 |
high | 7.5 | 0.0028 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled r | |
CVE-2026-7524 |
critical | 9.8 | 0.0079 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper val | |
CVE-2026-7365 |
high | 7.8 | 0.0012 | 2026-10-29 | IBM Operations Analytics - Log Analysis and IBM SmartCloud Analytics - Log Analysis uses | |
CVE-2026-7254 |
medium | 5.3 | 0.0024 | 2026-10-29 | IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unau | |
CVE-2026-5516 |
medium | 5.9 | 0.0021 | 2026-10-29 | IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Applic | |
CVE-2026-5065 |
high | 8.8 | 0.0019 | 2026-10-29 | IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as | |
CVE-2026-48972 |
high | 7.5 | 0.0031 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-48971 |
medium | 4.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in WebToffee Product Import Export for WooCommerce all | |
CVE-2026-42791 |
medium | 6.3 | 0.0033 | 2026-10-29 | Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module | |
CVE-2026-42789 |
high | 7.0 | 0.0038 | 2026-10-29 | Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_ke | |
CVE-2026-3676 |
medium | 6.5 | 0.0040 | 2026-10-29 | IBM Cloud APM, Base Private 8.1.4 and IBM Cloud APM, Advanced Private 8.1.4 IBM Db2 for Li | |
CVE-2026-3623 |
high | 7.8 | 0.0015 | 2026-10-29 | IBM Netezza Performance Server Replication Services 3.0.2.0 through 3.0.5.0 allows an atta | |
CVE-2026-3366 |
high | 7.5 | 0.0060 | 2026-10-29 | IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2. | |
CVE-2026-38426 |
high | 7.3 | 0.0061 | 2026-10-29 | Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote att | |
CVE-2026-36045 |
high | 7.3 | 0.0144 | 2026-10-29 | picoclaw <=v0.1.2 and earlier is vulnerable to OS command injection via the ExecTool compo | |
CVE-2026-35090 |
critical | 9.3 | 0.0063 | 2026-10-29 | In Slican telephone exchanges it is possible to manage the control panel remotely. An unau | |
CVE-2026-35089 |
high | 8.7 | 0.0059 | 2026-10-29 | In Slican telephone exchanges secure key is generated in a predictable manner using proper | |
CVE-2026-35087 |
critical | 9.3 | 0.0066 | 2026-10-29 | Slican telephone exchanges allow administrative protocol authentication bypass. An attacke | |
CVE-2026-2607 |
medium | 5.1 | 0.0013 | 2026-10-29 | IBM MQ Operator SC2: v3.2.0 through 3.2.23CD: v3.3.0, v3.4.0, v3.4.1, v3.5.0, v3.5.1 - v3 |