Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-1949 |
critical | 9.8 | 0.0061 | 2026-10-29 | Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the | |
CVE-2026-6947 |
high | 8.7 | 0.0057 | 2026-10-29 | DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnera | |
CVE-2026-41430 |
low | 1.3 | 0.0015 | 2026-10-29 | Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, m | |
CVE-2026-41324 |
high | 7.5 | 0.0033 | 2026-10-29 | basic-ftp is an FTP client for Node.js. Versions prior to 5.3.0 are vulnerable to denial o | |
CVE-2026-41319 |
medium | 5.9 | 0.0022 | 2026-10-29 | MailKit is a cross-platform mail client library built on top of MimeKit. A STARTTLS Respon | |
CVE-2026-41318 |
medium | 5.4 | 0.0019 | 2026-10-29 | AnythingLLM is an application that turns pieces of content into context that any LLM can u | |
CVE-2026-41317 |
medium | 6.6 | 0.0016 | 2026-10-29 | Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, m | |
CVE-2026-41316 |
— | — | 0.0113 | 2026-10-29 | ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygem | |
CVE-2026-33318 |
high | 8.8 | 0.0047 | 2026-10-29 | Actual is a local-first personal finance tool. Prior to version 26.4.0, any authenticated | |
CVE-2026-33317 |
high | 8.7 | 0.0019 | 2026-10-29 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linu | |
CVE-2026-32952 |
high | 7.5 | 0.0103 | 2026-10-29 | go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to | |
CVE-2026-41325 |
high | 7.1 | 0.0036 | 2026-10-29 | Kirby is an open-source content management system. Kirby's user permissions control which | |
CVE-2026-40099 |
medium | 5.3 | 0.0027 | 2026-10-29 | Kirby is an open-source content management system. Kirby's user permissions control which | |
CVE-2026-34587 |
high | 7.6 | 0.0033 | 2026-10-29 | Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, Kirb | |
CVE-2026-32870 |
medium | 6.9 | 0.0035 | 2026-10-29 | Kirby is an open-source content management system. Kirby's `Xml::value()` method has speci | |
CVE-2026-31956 |
medium | 4.3 | 0.0027 | 2026-10-29 | Xibo is an open source digital signage platform with a web content management system and W | |
CVE-2026-31955 |
medium | 4.9 | 0.0028 | 2026-10-29 | Xibo is an open source digital signage platform with a web content management system and W | |
CVE-2026-31953 |
medium | 5.4 | 0.0014 | 2026-10-29 | Xibo is an open source digital signage platform with a web content management system and W | |
CVE-2026-40630 |
critical | 9.3 | 0.0073 | 2026-10-29 | A vulnerability in SenseLive X3050’s web management interface allows unauthorized acces | |
CVE-2026-40623 |
high | 7.2 | 0.0032 | 2026-10-29 | A vulnerability in SenseLive X3050's web management interface allows critical system and n | |
CVE-2026-40620 |
critical | 9.3 | 0.0055 | 2026-10-29 | A vulnerability in SenseLive X3050’s embedded management service allows full administrativ | |
CVE-2026-40431 |
medium | 6.9 | 0.0019 | 2026-10-29 | A vulnerability exists in SenseLive X3050’s web management interface due to its reliance o | |
CVE-2026-39462 |
critical | 9.3 | 0.0039 | 2026-10-29 | A vulnerability exists in SenseLive X3050’s web management interface in which password upd | |
CVE-2026-35503 |
critical | 9.3 | 0.0055 | 2026-10-29 | A vulnerability in SenseLive X3050’s web management interface allows authentication logic | |
CVE-2026-35064 |
high | 8.7 | 0.0046 | 2026-10-29 | A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery | |
CVE-2026-31952 |
high | 8.1 | 0.0025 | 2026-10-29 | Xibo is an open source digital signage platform with a web content management system and W | |
CVE-2026-29197 |
medium | 4.3 | 0.0018 | 2026-10-29 | In versions <8.4.0, <8.3.2, <8.2.2, <8.1.3, <8.0.4, <7.13.6, <7.12.7, <7.11.7, and <7.10.1 | |
CVE-2026-29051 |
low | 3.3 | 0.0017 | 2026-10-29 | melange allows users to build apk packages using declarative pipelines. Starting in versio | |
CVE-2026-29050 |
medium | 6.1 | 0.0014 | 2026-10-29 | melange allows users to build apk packages using declarative pipelines. Starting in versio | |
CVE-2026-27843 |
critical | 9.2 | 0.0052 | 2026-10-29 | A vulnerability exists in SenseLive X3050's web management interface that allows critical | |
CVE-2026-27841 |
high | 8.4 | 0.0016 | 2026-10-29 | A vulnerability in SenseLive X3050's web management interface allows state-changing operat | |
CVE-2026-25775 |
critical | 9.3 | 0.0040 | 2026-10-29 | A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval a | |
CVE-2026-25720 |
medium | 6.9 | 0.0028 | 2026-10-29 | A vulnerability exists in SenseLive X3050’s web management interface due to improper sess | |
CVE-2026-1789 |
medium | 6.9 | 0.0029 | 2026-10-29 | A vulnerability in the browser-based remote management interface may allow an administrato | |
CVE-2026-6732 |
medium | 6.5 | 0.0063 | 2026-10-29 | A flaw was found in libxml2. This vulnerability occurs when the library processes a specia | |
CVE-2026-41274 |
critical | 9.3 | 0.0050 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-35431 |
critical | 10.0 | 0.0051 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an | |
CVE-2026-33819 |
critical | 9.8 | 0.0084 | 2026-10-29 | Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to exe | |
CVE-2026-33102 |
critical | 9.3 | 0.0040 | 2026-10-29 | Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized | |
CVE-2026-32210 |
high | 7.5 | 0.0058 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthoriz | |
CVE-2026-32172 |
high | 8.0 | 0.0034 | 2026-10-29 | Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker t | |
CVE-2026-2708 |
medium | 5.3 | 0.0032 | 2026-10-29 | A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The sou | |
CVE-2026-26210 |
critical | 9.3 | 0.0070 | 2026-10-29 | KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balanc | |
CVE-2026-26150 |
critical | 10.0 | 0.0057 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to | |
CVE-2026-24303 |
critical | 9.6 | 0.0039 | 2026-10-29 | Improper certificate validation in Microsoft Partner Center allows an unauthorized attacke | |
CVE-2026-6942 |
critical | 9.3 | 0.0192 | 2026-10-29 | radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that | |
CVE-2026-6941 |
medium | 6.9 | 0.0022 | 2026-10-29 | radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handli | |
CVE-2026-6940 |
medium | 6.9 | 0.0022 | 2026-10-29 | radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that al | |
CVE-2026-6376 |
high | 8.7 | 0.0050 | 2026-10-29 | A weakness in SpiceJet’s public booking retrieval page permits full passenger booking deta | |
CVE-2026-6375 |
high | 8.7 | 0.0031 | 2026-10-29 | A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger |