Browse All CVEs
50,426 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40844 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40843 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40842 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40841 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40840 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40839 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40838 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40837 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40836 |
high | 7.1 | 0.0022 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40835 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40834 |
high | 7.1 | 0.0022 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40833 |
high | 7.1 | 0.0022 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40832 |
high | 7.1 | 0.0026 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40831 |
high | 7.1 | 0.0032 | 2026-10-29 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40830 |
high | 7.0 | 0.0029 | 2026-10-29 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40829 |
high | 7.0 | 0.0029 | 2026-10-29 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40828 |
high | 7.0 | 0.0029 | 2026-10-29 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40827 |
high | 7.0 | 0.0029 | 2026-10-29 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-2237 |
medium | 5.5 | 0.0009 | 2026-10-29 | A use of get request method with sensitive query strings vulnerability in volume encryptio | |
CVE-2026-49001 |
medium | 5.3 | 0.0011 | 2026-10-29 | Cross-site request forgery (CSRF) vulnerabilities allow attackers to exploit a user's auth | |
CVE-2026-41704 |
medium | 6.8 | 0.0008 | 2026-10-29 | AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_comp | |
CVE-2026-41009 |
medium | 4.3 | 0.0010 | 2026-10-29 | When the director sends a long-running request (e.g. compile_package), the agent's reply J | |
CVE-2026-40826 |
medium | 6.9 | 0.0028 | 2026-10-29 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40825 |
high | 7.0 | 0.0024 | 2026-10-29 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40824 |
high | 7.0 | 0.0024 | 2026-10-29 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40823 |
high | 7.0 | 0.0024 | 2026-10-29 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40822 |
medium | 6.9 | 0.0028 | 2026-10-29 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40821 |
medium | 6.9 | 0.0028 | 2026-10-29 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerabili | |
CVE-2026-40819 |
high | 8.7 | 0.0032 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-40818 |
high | 8.7 | 0.0032 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-40817 |
high | 8.7 | 0.0032 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-40816 |
high | 8.7 | 0.0032 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-40815 |
high | 8.7 | 0.0032 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-40814 |
high | 8.7 | 0.0032 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-40813 |
high | 8.7 | 0.0032 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-40812 |
high | 8.7 | 0.0032 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-40811 |
high | 8.7 | 0.0032 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-40810 |
high | 8.7 | 0.0032 | 2026-10-29 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerabil | |
CVE-2026-5260 |
high | 8.2 | 0.0077 | 2026-10-29 | A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster | |
CVE-2026-46300 |
high | 7.8 | 0.1613 | 2026-10-29 | KEV 16 PoC | Linux Kernel contains a missing initialization of a variable vulnerability that could allo |
CVE-2026-48246 |
high | 8.2 | 0.0017 | 2026-10-29 | Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php | |
CVE-2026-48245 |
medium | 6.9 | 0.0022 | 2026-10-29 | Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that | |
CVE-2026-48244 |
medium | 6.9 | 0.0022 | 2026-10-29 | Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php | |
CVE-2026-48242 |
critical | 9.2 | 0.0030 | 2026-10-29 | Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials ( | |
CVE-2026-48236 |
high | 7.1 | 0.0021 | 2026-10-29 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in db_loader.php wh | |
CVE-2026-48230 |
medium | 5.1 | 0.0021 | 2026-10-29 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-48225 |
medium | 5.1 | 0.0021 | 2026-10-29 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-47323 |
— | — | 0.1956 | 2026-10-29 | Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CX | |
CVE-2026-42100 |
high | 7.1 | 0.0068 | 2026-10-29 | Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows Deni | |
CVE-2026-42099 |
high | 7.7 | 0.0072 | 2026-10-29 | Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_arti |