Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-8129 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was determined in SourceCodester SUP Online Shopping 1.0. The impacted ele | |
CVE-2026-42275 |
high | 8.7 | 0.0033 | 2026-10-29 | zrok is software for sharing web services, files, and network resources. Prior to version | |
CVE-2026-42274 |
high | 7.8 | 0.0037 | 2026-10-29 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior | |
CVE-2026-42273 |
high | 7.8 | 0.0030 | 2026-10-29 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior | |
CVE-2026-42272 |
high | 7.8 | 0.0040 | 2026-10-29 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior | |
CVE-2026-42271 |
high | 8.7 | 0.9144 | 2026-10-29 | KEV | BerriAI LiteLLM contains a command injection vulnerability that could allow any authentica |
CVE-2026-42261 |
high | 7.1 | 0.0024 | 2026-10-29 | PromptHub is an all-in-one AI toolbox for prompt, skill, and agent management. From versio | |
CVE-2026-42208 |
critical | 9.3 | 0.8942 | 2026-10-29 | KEV | BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read dat |
CVE-2026-42203 |
high | 8.6 | 0.0037 | 2026-10-29 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From | |
CVE-2026-42150 |
medium | 4.8 | 0.0017 | 2026-10-29 | wlc is a Weblate command-line client using Weblate's REST API. Prior to version 2.0.0, the | |
CVE-2026-41900 |
critical | 10.0 | 0.0091 | 2026-10-29 | OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to ver | |
CVE-2026-41646 |
medium | 5.5 | 0.0011 | 2026-10-29 | Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to | |
CVE-2026-41645 |
medium | 5.3 | 0.0035 | 2026-10-29 | Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to | |
CVE-2026-8128 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was found in SourceCodester SUP Online Shopping 1.0. The affected element | |
CVE-2026-8126 |
medium | 5.5 | 0.0025 | 2026-10-29 | A flaw has been found in SourceCodester Comment System 1.0. This issue affects some unknow | |
CVE-2026-6737 |
low | 2.0 | 0.0009 | 2026-10-29 | An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a | |
CVE-2026-3508 |
medium | 6.8 | 0.0014 | 2026-10-29 | An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface | |
CVE-2026-8125 |
low | 2.1 | 0.0025 | 2026-10-29 | A vulnerability was detected in code-projects Simple Chat System 1.0. This vulnerability a | |
CVE-2026-8117 |
low | 2.1 | 0.0027 | 2026-10-29 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. | |
CVE-2026-8116 |
low | 2.1 | 0.0028 | 2026-10-29 | A weakness has been identified in huangjunsen0406 xiaozhi-mcphub up to 1.0.3. This vulnera | |
CVE-2026-8115 |
medium | 5.5 | 0.0057 | 2026-10-29 | A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4. This affe | |
CVE-2026-6411 |
high | 7.3 | 0.0016 | 2026-10-29 | This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may | |
CVE-2026-42880 |
— | — | 0.0065 | 2026-10-29 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3. | |
CVE-2026-8113 |
low | 2.1 | 0.0041 | 2026-10-29 | A vulnerability was determined in 8421bit MiniClaw up to 43905b934cf76489ab28e4d17da28ee97 | |
CVE-2026-8112 |
low | 2.1 | 0.0323 | 2026-10-29 | A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a | |
CVE-2026-8106 |
medium | 5.9 | 0.0016 | 2026-10-29 | A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Ma | |
CVE-2026-8034 |
high | 7.9 | 0.0052 | 2026-10-29 | A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise | |
CVE-2026-7541 |
medium | 6.3 | 0.0039 | 2026-10-29 | A denial of service vulnerability was identified in GitHub Enterprise Server that allowed | |
CVE-2026-6736 |
medium | 6.3 | 0.0027 | 2026-10-29 | An authentication bypass vulnerability was identified in GitHub Enterprise Server that all | |
CVE-2026-42826 |
high | 7.5 | 0.0084 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unaut | |
CVE-2026-41929 |
medium | 5.1 | 0.0024 | 2026-10-29 | Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerabil | |
CVE-2026-41928 |
medium | 6.9 | 0.0042 | 2026-10-29 | Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controll | |
CVE-2026-41105 |
high | 8.1 | 0.0083 | 2026-10-29 | Server-side request forgery (ssrf) in Azure Notification Service allows an authorized atta | |
CVE-2026-40214 |
medium | 6.3 | 0.0021 | 2026-10-29 | In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce proj | |
CVE-2026-40213 |
high | 7.4 | 0.0021 | 2026-10-29 | OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for m | |
CVE-2026-35435 |
critical | 10.0 | 0.0116 | 2026-10-29 | Improper access control in Azure AI Foundry M365 published agents allows an unauthorized a | |
CVE-2026-35428 |
critical | 9.6 | 0.0093 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Azu | |
CVE-2026-34327 |
high | 8.2 | 0.0064 | 2026-10-29 | Externally controlled reference to a resource in another sphere in Microsoft Partner Cente | |
CVE-2026-33844 |
critical | 9.0 | 0.0099 | 2026-10-29 | Improper access control in Azure Managed Instance for Apache Cassandra allows an authorize | |
CVE-2026-33823 |
medium | 6.5 | 0.0072 | 2026-10-29 | Improper authorization in Microsoft Teams allows an authorized attacker to disclose inform | |
CVE-2026-33111 |
high | 7.5 | 0.0114 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Cop | |
CVE-2026-33109 |
critical | 9.9 | 0.0071 | 2026-10-29 | Improper access control in Azure Managed Instance for Apache Cassandra allows an authorize | |
CVE-2026-32207 |
medium | 6.1 | 0.0058 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Az | |
CVE-2026-26164 |
high | 7.5 | 0.0080 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in M36 | |
CVE-2026-26129 |
high | 7.5 | 0.0114 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in M36 | |
CVE-2026-8098 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted | |
CVE-2026-8097 |
low | 2.1 | 0.0019 | 2026-10-29 | A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability | |
CVE-2026-42449 |
high | 8.5 | 0.0021 | 2026-10-29 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, pro | |
CVE-2026-42047 |
high | 8.6 | 0.0038 | 2026-10-29 | Inngest is a platform for running event-driven and scheduled background functions with que | |
CVE-2026-41692 |
medium | 4.7 | 0.0014 | 2026-10-29 | i18nextify is a JavaScript library that adds website internationalization via a script tag |