Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-6706 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper access control in the vault documentation feature in Devolutions Server allows | |
CVE-2026-5944 |
medium | 6.7 | 0.0053 | 2026-10-29 | An improper access control vulnerability exists in the Cisco Intersight Device Connector f | |
CVE-2026-40552 |
medium | 4.7 | 0.0029 | 2026-10-29 | Multiple BinSoft products are vulnerable to Remote Command Execution. An authorized user w | |
CVE-2026-40551 |
high | 8.4 | 0.0013 | 2026-10-29 | Multiple BinSoft products perform client-side authentication. An attacker with access to a | |
CVE-2026-40550 |
medium | 6.9 | 0.0012 | 2026-10-29 | Multiple BinSoft products are vulnerable to Privilege Escalation due to excessive database | |
CVE-2026-7309 |
medium | 4.3 | 0.0018 | 2026-10-29 | A flaw was found in the OpenShift Container Platform build system. A user with the `edit` | |
CVE-2026-7271 |
medium | 5.5 | 0.0048 | 2026-10-29 | A vulnerability was detected in DV0x creative-ad-agent up to 751b9e5146604dc65049bd0f62dcb | |
CVE-2026-7269 |
low | 1.9 | 0.0021 | 2026-10-29 | A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affec | |
CVE-2026-5781 |
high | 8.5 | 0.0023 | 2026-10-29 | An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/mo | |
CVE-2026-5780 |
high | 8.5 | 0.0020 | 2026-10-29 | An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specif | |
CVE-2026-5779 |
critical | 9.4 | 0.0025 | 2026-10-29 | An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specif | |
CVE-2026-7268 |
low | 2.1 | 0.0020 | 2026-10-29 | A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impact | |
CVE-2026-7267 |
low | 2.1 | 0.0019 | 2026-10-29 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects an unkn | |
CVE-2026-7266 |
low | 2.1 | 0.0019 | 2026-10-29 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted | |
CVE-2026-7265 |
low | 2.1 | 0.0024 | 2026-10-29 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. | |
CVE-2026-3323 |
high | 7.5 | 0.0040 | 2026-10-29 | An unsecured configuration interface on affected devices allows unauthenticated remote att | |
CVE-2026-7280 |
high | 8.4 | 0.0012 | 2026-10-29 | AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing | |
CVE-2026-7279 |
high | 8.5 | 0.0011 | 2026-10-29 | AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authent | |
CVE-2026-7264 |
low | 2.1 | 0.0025 | 2026-10-29 | A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is | |
CVE-2026-41636 |
high | 8.7 | 0.0045 | 2026-10-29 | Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects | |
CVE-2026-41607 |
— | — | 0.0090 | 2026-10-29 | Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: befo | |
CVE-2026-41606 |
— | — | 0.0110 | 2026-10-29 | Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: | |
CVE-2026-41605 |
— | — | 0.0093 | 2026-10-29 | Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache | |
CVE-2026-41604 |
— | — | 0.0092 | 2026-10-29 | Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: befo | |
CVE-2026-41602 |
— | — | 0.0116 | 2026-10-29 | Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language | |
CVE-2026-7248 |
high | 8.9 | 0.0215 | 2026-10-29 | A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_h | |
CVE-2026-7247 |
high | 7.3 | 0.0072 | 2026-10-29 | A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the | |
CVE-2026-7244 |
high | 8.9 | 0.0242 | 2026-10-29 | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The impacted | |
CVE-2026-7243 |
high | 8.9 | 0.0245 | 2026-10-29 | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected eleme | |
CVE-2026-7242 |
high | 8.9 | 0.0245 | 2026-10-29 | A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the fu | |
CVE-2026-7241 |
high | 8.9 | 0.0245 | 2026-10-29 | A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the | |
CVE-2026-40980 |
medium | 6.5 | 0.0024 | 2026-10-29 | In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreason | |
CVE-2026-40979 |
medium | 6.1 | 0.0010 | 2026-10-29 | In Spring AI, having access to a shared environment can expose the ONNX model used by the | |
CVE-2026-40978 |
high | 8.8 | 0.0034 | 2026-10-29 | SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execu | |
CVE-2026-7240 |
high | 8.9 | 0.0243 | 2026-10-29 | A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability | |
CVE-2026-7238 |
low | 2.0 | 0.0023 | 2026-10-29 | A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part | |
CVE-2026-7237 |
medium | 5.5 | 0.0045 | 2026-10-29 | A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27. Affected by this issue | |
CVE-2026-7235 |
medium | 5.5 | 0.0046 | 2026-10-29 | A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to b185 | |
CVE-2026-41526 |
high | 7.8 | 0.0017 | 2026-10-29 | In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so | |
CVE-2026-41525 |
medium | 6.5 | 0.0013 | 2026-10-29 | KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) | |
CVE-2026-40966 |
medium | 5.9 | 0.0023 | 2026-10-29 | In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memor | |
CVE-2026-7234 |
medium | 5.5 | 0.0043 | 2026-10-29 | A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affec | |
CVE-2026-7233 |
low | 1.9 | 0.0024 | 2026-10-29 | A vulnerability was determined in Artifex MuPDF. The impacted element is the function fz_s | |
CVE-2026-7230 |
low | 2.1 | 0.0026 | 2026-10-29 | A vulnerability was found in SourceCodester Safety Anger Pad 1.0. The affected element is | |
CVE-2026-7229 |
low | 2.1 | 0.0023 | 2026-10-29 | A vulnerability was found in code-projects Coaching Management System 1.0. This affects an | |
CVE-2026-40967 |
high | 8.6 | 0.0039 | 2026-10-29 | In Spring AI, various FilterExpressionConverter implementations accept a filter expression | |
CVE-2026-40356 |
high | 7.5 | 0.0060 | 2026-10-29 | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant ou | |
CVE-2026-7228 |
medium | 5.5 | 0.0025 | 2026-10-29 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element | |
CVE-2026-7227 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is t | |
CVE-2026-7226 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. |