Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-44335 |
high | 7.7 | 0.0038 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic i | |
CVE-2026-44334 |
high | 8.4 | 0.0025 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 4.5.139 to before version 4.6.32, CV | |
CVE-2026-44129 |
high | 8.3 | 0.0053 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template inject | |
CVE-2026-44128 |
critical | 9.3 | 0.0085 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code e | |
CVE-2026-44126 |
critical | 9.2 | 0.0047 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.4 insecurely deserializes untrusted data | |
CVE-2026-44125 |
critical | 9.3 | 0.0039 | 2026-10-29 | SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorization checks | |
CVE-2026-41512 |
critical | 9.9 | 0.0059 | 2026-10-29 | ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to befo | |
CVE-2026-41509 |
medium | 6.9 | 0.0034 | 2026-10-29 | CROSS implementation contains reference and optimized implementations of the CROSS post-qu | |
CVE-2026-41507 |
critical | 9.8 | 0.0039 | 2026-10-29 | math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string | |
CVE-2026-41497 |
critical | 9.8 | 0.0054 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to version 4.6.9, the fix for PraisonAI's M | |
CVE-2026-41496 |
high | 8.1 | 0.0035 | 2026-10-29 | PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.9 and praisonaiage | |
CVE-2026-41493 |
medium | 6.9 | 0.0039 | 2026-10-29 | YARD is a Ruby Documentation tool. Prior to version 0.9.42, a path traversal vulnerability | |
CVE-2026-41161 |
medium | 6.9 | 0.0033 | 2026-10-29 | Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, | |
CVE-2026-39816 |
high | 7.5 | 0.0076 | 2026-10-29 | The optional extension component TinkerpopClientService is missing the Restricted annotati | |
CVE-2026-32803 |
low | 3.3 | 0.0009 | 2026-10-29 | Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 | |
CVE-2026-8077 |
high | 8.6 | 0.0031 | 2026-10-29 | Lack of proper authorization implementation in the CashDro 3 web administration panel, ver | |
CVE-2026-25199 |
critical | 9.1 | 0.0050 | 2026-10-29 | Instances deployed via the Proxmox extension allow unauthorized access to instances belong | |
CVE-2026-25077 |
high | 8.8 | 0.0073 | 2026-10-29 | Account users are allowed by default to register templates to be downloaded directly to th | |
CVE-2026-8153 |
critical | 9.8 | 0.0285 | 2026-10-29 | OS command injection in Dashboard Server interface in Universal Robots PolyScope versions | |
CVE-2026-8076 |
critical | 9.3 | 0.0032 | 2026-10-29 | Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the | |
CVE-2026-3318 |
medium | 5.3 | 0.0034 | 2026-10-29 | Open redirection vulnerability in the latest demo version of the Cradle eCommerce platform | |
CVE-2026-6213 |
critical | 10.0 | 0.0033 | 2026-10-29 | A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses | |
CVE-2026-8149 |
medium | 5.1 | 0.0016 | 2026-10-29 | A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, A | |
CVE-2026-8069 |
high | 8.5 | 0.0012 | 2026-10-29 | PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vuln | |
CVE-2026-44916 |
low | 3.0 | 0.0034 | 2026-10-29 | In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info[ | |
CVE-2023-46453 |
critical | 9.8 | 0.0090 | 2026-10-29 | Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in admini | |
CVE-2024-53326 |
high | 7.3 | 0.0049 | 2026-10-29 | LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.Auto | |
CVE-2024-51092 |
critical | 9.1 | 0.0718 | 2026-10-29 | LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command | |
CVE-2024-46508 |
high | 7.5 | 0.0043 | 2026-10-29 | yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secr | |
CVE-2024-46507 |
high | 7.3 | 0.0392 | 2026-10-29 | A SSTI (server side template injection) vulnerability in the custom template export functi | |
CVE-2024-45257 |
high | 7.3 | 0.0389 | 2026-10-29 | A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 al | |
CVE-2024-33724 |
medium | 5.4 | 0.0063 | 2026-10-29 | SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter | |
CVE-2024-33722 |
medium | 6.3 | 0.0024 | 2026-10-29 | SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php | |
CVE-2024-33288 |
high | 7.3 | 0.0092 | 2026-10-29 | Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerab | |
CVE-2024-30167 |
medium | 6.3 | 0.0114 | 2026-10-29 | /cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated u | |
CVE-2024-27686 |
high | 7.5 | 0.0059 | 2026-10-29 | Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to ca | |
CVE-2023-47268 |
medium | 5.3 | 0.0072 | 2026-10-29 | 2 PoC | In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf pro |
CVE-2026-8148 |
high | 7.8 | 0.0009 | 2026-10-29 | NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate pri | |
CVE-2026-8138 |
high | 7.4 | 0.0057 | 2026-10-29 | A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function form | |
CVE-2026-8137 |
high | 7.4 | 0.0046 | 2026-10-29 | A vulnerability has been found in Totolink X5000R 9.1.0u.6369_B20230113. This vulnerabilit | |
CVE-2026-42278 |
high | 8.8 | 0.0045 | 2026-10-29 | UltraDAG is a minimal DAG-BFT blockchain in Rust. Prior to commit fb6ef59, the UltraDAG St | |
CVE-2023-42346 |
high | 7.5 | 0.0023 | 2026-10-29 | Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host. | |
CVE-2023-42345 |
medium | 6.1 | 0.0015 | 2026-10-29 | A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGr | |
CVE-2023-42344 |
high | 7.3 | 0.0234 | 2026-10-29 | Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive | |
CVE-2023-42343 |
medium | 6.1 | 0.0059 | 2026-10-29 | A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-onli | |
CVE-2026-8136 |
low | 1.9 | 0.0020 | 2026-10-29 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affe | |
CVE-2026-8133 |
medium | 5.5 | 0.0027 | 2026-10-29 | A security vulnerability has been detected in zyx0814 FilePress up to 2.2.0. Affected by t | |
CVE-2026-8132 |
medium | 5.5 | 0.0025 | 2026-10-29 | A weakness has been identified in CodeAstro Leave Management System 1.0. Affected is an un | |
CVE-2026-8131 |
medium | 5.5 | 0.0032 | 2026-10-29 | A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0. This impact | |
CVE-2026-8130 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. This affects an |