Browse All CVEs
49,628 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-3259 |
high | 7.1 | 0.0023 | 2026-10-29 | A Generation of Error Message Containing Sensitive Information vulnerability in the Materi | |
CVE-2026-3960 |
critical | 9.8 | 0.0094 | 2026-10-29 | A critical remote code execution vulnerability exists in the unauthenticated REST API endp | |
CVE-2026-6885 |
critical | 9.3 | 0.0050 | 2026-10-29 | Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has an Arbitr | |
CVE-2026-6886 |
critical | 9.3 | 0.0045 | 2026-10-29 | Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has a Authent | |
CVE-2026-6887 |
critical | 9.3 | 0.0036 | 2026-10-29 | Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has a SQL Inj | |
CVE-2026-6903 |
high | 8.7 | 0.0034 | 2026-10-29 | The LabOne Web Server, backing the LabOne User Interface, contains insufficient input vali | |
CVE-2026-28040 |
medium | 6.5 | 0.0016 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-39440 |
critical | 9.9 | 0.0036 | 2026-10-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in Funnelforms LLC | |
CVE-2026-35225 |
high | 8.7 | 0.0041 | 2026-10-29 | An unauthenticated remote attacker is able to exhaust all available TCP connections in the | |
CVE-2025-50229 |
critical | 9.8 | 0.0036 | 2026-10-29 | Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module. | |
CVE-2026-23751 |
critical | 9.3 | 0.0088 | 2026-10-29 | Kofax Capture, now referred to as Tungsten Capture, version 6.0.0.0 (other versions may be | |
CVE-2026-33999 |
high | 7.8 | 0.0038 | 2026-10-29 | A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically | |
CVE-2026-34001 |
high | 7.8 | 0.0026 | 2026-10-29 | A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XS | |
CVE-2026-34003 |
high | 7.8 | 0.0025 | 2026-10-29 | A flaw was found in the X.Org X server's XKB key types request validation. A local attacke | |
CVE-2026-41238 |
medium | 6.9 | 0.0027 | 2026-10-29 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions | |
CVE-2026-41239 |
medium | 6.8 | 0.0025 | 2026-10-29 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Starting | |
CVE-2026-41240 |
medium | 6.0 | 0.0031 | 2026-10-29 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions | |
CVE-2026-40182 |
medium | 5.9 | 0.0030 | 2026-10-29 | OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When e | |
CVE-2026-40891 |
medium | 5.3 | 0.0019 | 2026-10-29 | OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When e | |
CVE-2026-5039 |
medium | 6.1 | 0.0013 | 2026-10-29 | TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptogr | |
CVE-2026-6919 |
critical | 9.6 | 0.0029 | 2026-10-29 | Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attac | |
CVE-2026-6920 |
critical | 9.6 | 0.0021 | 2026-10-29 | Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a re | |
CVE-2026-6921 |
high | 8.3 | 0.0019 | 2026-10-29 | Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker | |
CVE-2026-33694 |
high | 7.4 | 0.0015 | 2026-10-29 | This vulnerability allows an attacker to create a junction, enabling the deletion of arbit | |
CVE-2026-40886 |
— | — | 0.0038 | 2026-10-29 | Argo Workflows is an open source container-native workflow engine for orchestrating parall | |
CVE-2026-40894 |
medium | 5.3 | 0.0046 | 2026-10-29 | OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to | |
CVE-2026-41078 |
medium | 5.9 | 0.0022 | 2026-10-29 | OpenTelemetry dotnet is a dotnet telemetry framework. In 1.6.0-rc.1 and earlier, OpenTelem | |
CVE-2026-41173 |
medium | 5.9 | 0.0030 | 2026-10-29 | The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurati | |
CVE-2026-41205 |
high | 7.7 | 0.0036 | 2026-10-29 | Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template | |
CVE-2026-41213 |
medium | 5.9 | 0.0026 | 2026-10-29 | @node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The to | |
CVE-2026-41246 |
— | — | 0.0049 | 2026-10-29 | Contour is a Kubernetes ingress controller using Envoy proxy. From v1.19.0 to before v1.33 | |
CVE-2026-41247 |
high | 8.9 | 0.0157 | 2026-10-29 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Pr | |
CVE-2026-6074 |
critical | 9.3 | 0.0055 | 2026-10-29 | Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerabili | |
CVE-2026-25874 |
critical | 9.3 | 0.1555 | 2026-10-29 | LeRobot through 0.6.1 contains an unsafe deserialization vulnerability in the async infere | |
CVE-2026-41137 |
critical | 9.4 | 0.0145 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41138 |
high | 8.8 | 0.0060 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41264 |
critical | 9.2 | 0.0179 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41265 |
critical | 9.2 | 0.0057 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41266 |
high | 7.7 | 0.0406 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41267 |
critical | 9.8 | 0.0033 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41268 |
critical | 9.8 | 0.1744 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41269 |
high | 8.8 | 0.0047 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41270 |
high | 8.3 | 0.0023 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41271 |
high | 8.3 | 0.0023 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41272 |
high | 7.1 | 0.0026 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41273 |
high | 7.7 | 0.0031 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41275 |
high | 7.5 | 0.0018 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41276 |
high | 7.7 | 0.0687 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41277 |
high | 7.6 | 0.0311 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-41278 |
high | 8.7 | 0.0042 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P |