Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-7409 |
low | 2.0 | 0.0020 | 2026-10-29 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the fun | |
CVE-2026-7408 |
low | 2.0 | 0.0025 | 2026-10-29 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by t | |
CVE-2026-7407 |
low | 2.0 | 0.0025 | 2026-10-29 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. | |
CVE-2026-7404 |
medium | 5.5 | 0.0051 | 2026-10-29 | A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected i | |
CVE-2026-7403 |
medium | 5.5 | 0.0056 | 2026-10-29 | A security flaw has been discovered in geldata gel-mcp 0.1.0. This impacts the function li | |
CVE-2026-1858 |
medium | 4.8 | 0.0015 | 2026-10-29 | wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EK | |
CVE-2026-7426 |
medium | 6.1 | 0.0025 | 2026-10-29 | Insufficient validation of the prefix length field in IPv6 Router Advertisement processing | |
CVE-2026-7425 |
medium | 6.0 | 0.0023 | 2026-10-29 | Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS- | |
CVE-2026-7401 |
low | 2.1 | 0.0032 | 2026-10-29 | A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predic | |
CVE-2026-7400 |
medium | 5.5 | 0.0043 | 2026-10-29 | A security vulnerability has been detected in geekgod382 filesystem-mcp-server 1.0.0. This | |
CVE-2026-34965 |
high | 8.7 | 0.0084 | 2026-10-29 | Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/ | |
CVE-2026-7466 |
high | 7.7 | 0.0034 | 2026-10-29 | AgentFlow contains an arbitrary code execution vulnerability that allows attackers to exec | |
CVE-2026-7439 |
medium | 4.8 | 0.0009 | 2026-10-29 | AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/r | |
CVE-2026-7424 |
high | 7.2 | 0.0022 | 2026-10-29 | Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V | |
CVE-2026-7423 |
medium | 6.0 | 0.0022 | 2026-10-29 | Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V | |
CVE-2026-7422 |
high | 7.1 | 0.0018 | 2026-10-29 | Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adj | |
CVE-2026-7394 |
low | 2.0 | 0.0024 | 2026-10-29 | A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by | |
CVE-2026-5712 |
high | 8.8 | 0.0016 | 2026-10-29 | This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity | |
CVE-2026-26015 |
critical | 10.0 | 0.0117 | 2026-10-29 | DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.1 | |
CVE-2026-7393 |
low | 2.0 | 0.0027 | 2026-10-29 | A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the | |
CVE-2026-7392 |
low | 2.1 | 0.0019 | 2026-10-29 | A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. | |
CVE-2026-7391 |
low | 2.1 | 0.0019 | 2026-10-29 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affe | |
CVE-2026-6915 |
medium | 5.3 | 0.0017 | 2026-10-29 | An authorization flaw in the user management command could allow an authenticated user to | |
CVE-2026-6914 |
high | 7.1 | 0.0026 | 2026-10-29 | Computing the MD5 checksum of a malformed BSON object under specific conditions may cause | |
CVE-2026-0206 |
medium | 4.9 | 0.0050 | 2026-10-29 | A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remo | |
CVE-2026-0205 |
medium | 6.8 | 0.0039 | 2026-10-29 | A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to intera | |
CVE-2026-0204 |
high | 8.0 | 0.0038 | 2026-10-29 | A vulnerability in the access control mechanism of SonicOS may allow certain management in | |
CVE-2026-7390 |
low | 2.0 | 0.0019 | 2026-10-29 | A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Th | |
CVE-2026-7386 |
medium | 5.5 | 0.0043 | 2026-10-29 | A flaw has been found in fatbobman mail-mcp-bridge up to 1.3.3. Affected is an unknown fun | |
CVE-2026-6849 |
high | 8.8 | 0.0101 | 2026-10-29 | Improper neutralization of special elements used in an OS command ('OS command injection') | |
CVE-2026-5166 |
critical | 9.6 | 0.0033 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-41940 |
critical | 9.3 | 0.9853 | 2026-10-29 | KEV | WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authenticati |
CVE-2026-40230 |
medium | 4.8 | 0.0018 | 2026-10-29 | Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rende | |
CVE-2026-40229 |
medium | 5.1 | 0.0018 | 2026-10-29 | Helpy contains a stored cross-site scripting vulnerability in the post author display logi | |
CVE-2026-2810 |
medium | 6.8 | 0.0012 | 2026-10-29 | Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client | |
CVE-2025-56536 |
medium | 6.1 | 0.0019 | 2026-10-29 | A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers | |
CVE-2025-56535 |
medium | 6.1 | 0.0019 | 2026-10-29 | A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to exe | |
CVE-2026-7384 |
medium | 5.5 | 0.0042 | 2026-10-29 | A vulnerability was detected in ezequiroga mcp-bases 357ca19c7a49a9b9cb2ef639b366f03aba8be | |
CVE-2026-7111 |
high | 8.4 | 0.0016 | 2026-10-29 | Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks | |
CVE-2026-5161 |
high | 8.8 | 0.0033 | 2026-10-29 | Improper link resolution before file access ('link following') vulnerability in TUBITAK BI | |
CVE-2026-5141 |
high | 8.8 | 0.0023 | 2026-10-29 | Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vul | |
CVE-2026-41952 |
high | 7.8 | 0.0011 | 2026-10-29 | Local privilege escalation due to improper input validation. The following products are af | |
CVE-2026-41220 |
high | 7.8 | 0.0011 | 2026-10-29 | Local privilege escalation due to improper input validation. The following products are af | |
CVE-2026-36837 |
high | 7.5 | 0.0031 | 2026-10-29 | TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffe | |
CVE-2026-25852 |
medium | 6.7 | 0.0009 | 2026-10-29 | Local privilege escalation due to DLL hijacking vulnerability. The following products are | |
CVE-2026-5140 |
high | 8.8 | 0.0048 | 2026-10-29 | Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILG | |
CVE-2026-42525 |
medium | 4.3 | 0.0021 | 2026-10-29 | Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does | |
CVE-2026-42524 |
high | 8.0 | 0.0028 | 2026-10-29 | Jenkins HTML Publisher Plugin 427 and earlier does not escape job name and URL in the lega | |
CVE-2026-42523 |
critical | 9.0 | 0.0028 | 2026-10-29 | Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part | |
CVE-2026-42522 |
medium | 4.3 | 0.0018 | 2026-10-29 | A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ a |