Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-8271 |
low | 2.0 | 0.0510 | 2026-10-29 | A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the func | |
CVE-2026-42291 |
medium | 6.8 | 0.0019 | 2026-10-29 | SysReptor is a fully customizable pentest reporting platform. From version 2026.4 to befor | |
CVE-2026-42224 |
high | 7.6 | 0.0026 | 2026-10-29 | ipl/web is a set of common web components for php projects. Prior to versions 0.13.1 and 0 | |
CVE-2026-41432 |
high | 8.2 | 0.0085 | 2026-10-29 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset mana | |
CVE-2026-42213 |
medium | 5.1 | 0.0056 | 2026-10-29 | SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE f | |
CVE-2026-42212 |
high | 7.1 | 0.0040 | 2026-10-29 | SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE f | |
CVE-2026-42209 |
medium | 6.5 | 0.0043 | 2026-10-29 | FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.2 | |
CVE-2026-42206 |
medium | 5.7 | 0.0015 | 2026-10-29 | Roadiz is a polymorphic content management system based on a node system. Prior to version | |
CVE-2026-42202 |
medium | 6.5 | 0.0020 | 2026-10-29 | nova-toggle-5 enables fliping booleans in the index. Prior to version 1.3.0, the toggle en | |
CVE-2026-42199 |
medium | 6.2 | 0.0019 | 2026-10-29 | Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an in | |
CVE-2026-42195 |
low | 3.4 | 0.0019 | 2026-10-29 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7 | |
CVE-2026-42193 |
critical | 9.1 | 0.0013 | 2026-10-29 | Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, th | |
CVE-2026-42192 |
medium | 5.4 | 0.0018 | 2026-10-29 | Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, a | |
CVE-2026-44400 |
high | 8.7 | 0.0035 | 2026-10-29 | MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnera | |
CVE-2026-7807 |
high | 8.7 | 0.0030 | 2026-10-29 | SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability | |
CVE-2026-44694 |
high | 7.2 | 0.0024 | 2026-10-29 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, pro | |
CVE-2026-42282 |
medium | 4.3 | 0.0025 | 2026-10-29 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, pro | |
CVE-2026-42190 |
medium | 5.3 | 0.0011 | 2026-10-29 | RedwoodSDK is a server-first React framework. From version 1.0.0-beta.50 to before version | |
CVE-2026-42189 |
high | 7.5 | 0.0048 | 2026-10-29 | Russh is a Rust SSH client & server library. Prior to version 0.60.1, a pre-authentication | |
CVE-2026-42185 |
medium | 5.5 | 0.0032 | 2026-10-29 | People is an application to handle users and teams, and distribute permissions across La S | |
CVE-2026-42181 |
medium | 6.5 | 0.0026 | 2026-10-29 | Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy fe | |
CVE-2026-42180 |
medium | 6.3 | 0.0018 | 2026-10-29 | Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy al | |
CVE-2026-42176 |
medium | 6.7 | 0.0031 | 2026-10-29 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.67.0, Scool | |
CVE-2026-42160 |
critical | 10.0 | 0.0032 | 2026-10-29 | Data Space Portal is an open-source Software as a Service (SaaS) solution designed to stre | |
CVE-2026-41495 |
medium | 5.3 | 0.0026 | 2026-10-29 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, pro | |
CVE-2026-8178 |
critical | 9.2 | 0.0060 | 2026-10-29 | An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain cond | |
CVE-2026-41511 |
medium | 5.5 | 0.0019 | 2026-10-29 | OpenMcdf is a fully .NET / C# library to manipulate Compound File Binary File Format files | |
CVE-2026-29203 |
medium | 5.3 | 0.0049 | 2026-10-29 | A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowin | |
CVE-2026-29202 |
medium | 5.3 | 0.0186 | 2026-10-29 | Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows | |
CVE-2026-29201 |
— | — | 0.0043 | 2026-10-29 | Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` admin | |
CVE-2026-6659 |
high | 7.5 | 0.0045 | 2026-10-29 | Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts | |
CVE-2026-42072 |
critical | 9.8 | 0.0044 | 2026-10-29 | Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW se | |
CVE-2026-42028 |
medium | 5.3 | 0.0040 | 2026-10-29 | novaGallery is a php image gallery. Prior to version 2.1.1, a path traversal vulnerability | |
CVE-2026-41889 |
low | 2.3 | 0.0036 | 2026-10-29 | pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can o | |
CVE-2026-41887 |
medium | 4.9 | 0.0047 | 2026-10-29 | Flarum is open-source forum software. Prior to versions 1.8.16 and 2.0.0-rc.1, Flarum's pa | |
CVE-2026-44499 |
high | 8.7 | 0.0035 | 2026-10-29 | ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, a composite denial | |
CVE-2026-42794 |
low | 2.3 | 0.0028 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinth | |
CVE-2026-42353 |
high | 8.2 | 0.0039 | 2026-10-29 | i18next-http-middleware is a middleware to be used with Node.js web frameworks like expres | |
CVE-2026-41885 |
medium | 6.5 | 0.0022 | 2026-10-29 | i18next-locize-backend is a simple i18next backend for locize.com which can be used in Nod | |
CVE-2026-41690 |
high | 8.6 | 0.0031 | 2026-10-29 | 18next-http-middleware is a middleware to be used with Node.js web frameworks like express | |
CVE-2026-41683 |
high | 8.6 | 0.0033 | 2026-10-29 | i18next-http-middleware is a middleware to be used with Node.js web frameworks like expres | |
CVE-2026-41070 |
critical | 10.0 | 0.0044 | 2026-10-29 | openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle a | |
CVE-2026-44500 |
medium | 5.3 | 0.0036 | 2026-10-29 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0, prior to ze | |
CVE-2026-41583 |
critical | 9.3 | 0.0028 | 2026-10-29 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to | |
CVE-2026-41576 |
high | 7.1 | 0.0027 | 2026-10-29 | Brave CMS is an open-source CMS. Prior to commit 6c56603, the contact form is publicly acc | |
CVE-2026-41570 |
high | 7.8 | 0.0019 | 2026-10-29 | PHPUnit is a testing framework for PHP. In versions 12.5.21 and 13.1.5, PHPUnit forwards P | |
CVE-2026-41524 |
high | 8.7 | 0.0026 | 2026-10-29 | Brave CMS is an open-source CMS. Prior to commit 6c56603, page and article body content en | |
CVE-2026-41308 |
medium | 6.5 | 0.0029 | 2026-10-29 | Password Pusher is an open source application to communicate sensitive information over th | |
CVE-2026-7864 |
medium | 6.9 | 0.1611 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables t | |
CVE-2026-44339 |
high | 8.6 | 0.0036 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.37 and praisonaiag |