Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42854 |
critical | 9.8 | 0.0057 | 2026-10-29 | arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and | |
CVE-2026-42844 |
high | 8.7 | 0.0034 | 2026-10-29 | Grav is a file-based Web platform. In Grav 2.0.0-beta.2, a low-privileged authenticated AP | |
CVE-2026-42545 |
medium | 5.9 | 0.0027 | 2026-10-29 | Granian is a Rust HTTP server for Python applications. From 0.2.0 to 2.7.4, Granian aborts | |
CVE-2026-42544 |
high | 7.5 | 0.0039 | 2026-10-29 | Granian is a Rust HTTP server for Python applications. From 1.2.0 to 2.7.4, Granian aborts | |
CVE-2026-42268 |
high | 8.2 | 0.0040 | 2026-10-29 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Ap | |
CVE-2026-42196 |
critical | 9.9 | 0.0056 | 2026-10-29 | django-s3file is a lightweight file upload input for Django and Amazon S3. Prior to 7.0.2, | |
CVE-2026-40902 |
high | 7.5 | 0.0040 | 2026-10-29 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1 | |
CVE-2026-40863 |
high | 7.5 | 0.0040 | 2026-10-29 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1 | |
CVE-2026-35555 |
high | 7.0 | 0.0015 | 2026-10-29 | PowerSYSTEM Center feature for device project groups allows an authenticated user with lim | |
CVE-2026-33570 |
medium | 6.9 | 0.0016 | 2026-10-29 | PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user | |
CVE-2026-26289 |
high | 8.4 | 0.0014 | 2026-10-29 | PowerSYSTEM Center REST API endpoint for device account export allows an authenticated use | |
CVE-2026-44246 |
high | 7.2 | 0.0029 | 2026-10-29 | nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a d | |
CVE-2026-44240 |
high | 7.5 | 0.0051 | 2026-10-29 | basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable to client- | |
CVE-2026-44232 |
high | 8.7 | 0.0041 | 2026-10-29 | DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defen | |
CVE-2026-44224 |
high | 8.6 | 0.0038 | 2026-10-29 | Wiki.js is an open source wiki app built on Node.js. Prior to 2.5.313, the users.update Gr | |
CVE-2026-44012 |
high | 7.1 | 0.0034 | 2026-10-29 | Craft CMS is a content management system (CMS). From 5.0.0-RC1 to before 5.9.18, AssetsCon | |
CVE-2026-44011 |
high | 8.6 | 0.0062 | 2026-10-29 | Craft CMS is a content management system (CMS). From 4.0.0 to before 4.17.12 and 5.9.18, C | |
CVE-2026-44010 |
high | 7.1 | 0.0041 | 2026-10-29 | Craft CMS is a content management system (CMS). From 4.0.0 to before 4.17.12 and 5.9.18, t | |
CVE-2026-35504 |
medium | 5.1 | 0.0027 | 2026-10-29 | PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerabilit | |
CVE-2026-8052 |
medium | 6.0 | 0.0013 | 2026-10-29 | HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read an | |
CVE-2026-7474 |
high | 8.8 | 0.0816 | 2026-10-29 | HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to code execution on th | |
CVE-2026-6959 |
medium | 6.0 | 0.0017 | 2026-10-29 | HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to arbitrary file read | |
CVE-2026-44874 |
medium | 4.9 | 0.0031 | 2026-10-29 | A vulnerability exists in the web-based management interface of an AOS-10 Gateway that cou | |
CVE-2026-44873 |
medium | 5.4 | 0.0014 | 2026-10-29 | A session management vulnerability in AOS-8 allows previously authenticated users to retai | |
CVE-2026-44872 |
high | 7.2 | 0.0081 | 2026-10-29 | A command injection vulnerability exists in the web-based management interface of AOS-8 an | |
CVE-2026-44870 |
high | 8.8 | 0.0090 | 2026-10-29 | Command injection vulnerabilities exist in the command line interface (CLI) service access | |
CVE-2026-44869 |
high | 8.8 | 0.0090 | 2026-10-29 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and | |
CVE-2026-44868 |
high | 8.8 | 0.0090 | 2026-10-29 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and | |
CVE-2026-44867 |
high | 8.8 | 0.0090 | 2026-10-29 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and | |
CVE-2026-44866 |
high | 8.8 | 0.0090 | 2026-10-29 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and | |
CVE-2026-44865 |
high | 7.2 | 0.0092 | 2026-10-29 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and | |
CVE-2026-44864 |
high | 7.2 | 0.0032 | 2026-10-29 | SQL injection vulnerabilities exist in several underlying service components accessible th | |
CVE-2026-44863 |
high | 7.2 | 0.0032 | 2026-10-29 | SQL injection vulnerabilities exist in several underlying service components accessible th | |
CVE-2026-44862 |
high | 7.2 | 0.0032 | 2026-10-29 | SQL injection vulnerabilities exist in several underlying service components accessible th | |
CVE-2026-44861 |
high | 7.2 | 0.0032 | 2026-10-29 | SQL injection vulnerabilities exist in several underlying service components accessible th | |
CVE-2026-44860 |
high | 7.2 | 0.0032 | 2026-10-29 | SQL injection vulnerabilities exist in several underlying service components accessible th | |
CVE-2026-44859 |
high | 7.2 | 0.0036 | 2026-10-29 | Stack-based buffer overflow vulnerabilities exist in several underlying management service | |
CVE-2026-44858 |
high | 7.2 | 0.0035 | 2026-10-29 | Stack-based buffer overflow vulnerabilities exist in several underlying management service | |
CVE-2026-44857 |
high | 7.2 | 0.0035 | 2026-10-29 | Stack-based buffer overflow vulnerabilities exist in several underlying management service | |
CVE-2026-44856 |
high | 7.2 | 0.0035 | 2026-10-29 | Stack-based buffer overflow vulnerabilities exist in several underlying management service | |
CVE-2026-44855 |
high | 7.2 | 0.0035 | 2026-10-29 | Stack-based buffer overflow vulnerabilities exist in several underlying management service | |
CVE-2026-44854 |
high | 7.2 | 0.0101 | 2026-10-29 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and | |
CVE-2026-44853 |
high | 7.2 | 0.0101 | 2026-10-29 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and | |
CVE-2026-44852 |
high | 7.2 | 0.0044 | 2026-10-29 | An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-ba | |
CVE-2026-44225 |
critical | 9.3 | 0.0154 | 2026-10-29 | Pulpy is a lightweight, cross-platform desktop application packager for web apps. Prior to | |
CVE-2026-44221 |
critical | 9.0 | 0.0034 | 2026-10-29 | ArcadeDB is a Multi-Model DBMS. Starting in version 21.10.1 and prior to version 26.4.2, a | |
CVE-2026-44220 |
low | 3.2 | 0.0021 | 2026-10-29 | ciguard is a static security auditor for CI/CD pipelines. From 0.8.0 to 0.8.1 , the discov | |
CVE-2026-44219 |
low | 3.7 | 0.0030 | 2026-10-29 | ciguard is a static security auditor for CI/CD pipelines. From 0.6.0 to 0.8.1, both SCA HT | |
CVE-2026-44218 |
low | 3.0 | 0.0012 | 2026-10-29 | ciguard is a static security auditor for CI/CD pipelines. From 0.1.0 to 0.8.1, the publish | |
CVE-2026-44217 |
medium | 6.6 | 0.0048 | 2026-10-29 | sse-channel is an SSE-implementation which can be used to any node.js http request/respons |