Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-3960 |
critical | 9.8 | 0.0094 | 2026-10-29 | A critical remote code execution vulnerability exists in the unauthenticated REST API endp | |
CVE-2026-3259 |
high | 7.1 | 0.0023 | 2026-10-29 | A Generation of Error Message Containing Sensitive Information vulnerability in the Materi | |
CVE-2026-41564 |
high | 7.5 | 0.0043 | 2026-10-29 | CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking | |
CVE-2026-34488 |
high | 7.0 | 0.0014 | 2026-10-29 | IP Setting Software contains an issue with the DLL search path, which may lead to insecure | |
CVE-2026-41990 |
medium | 4.0 | 0.0023 | 2026-10-29 | Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a boun | |
CVE-2026-41989 |
medium | 6.7 | 0.0018 | 2026-10-29 | Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of servic | |
CVE-2026-41988 |
low | 2.5 | 0.0018 | 2026-10-29 | uuid before 14.0.0 can make unexpected writes when external output buffers are used, and t | |
CVE-2026-40529 |
medium | 5.1 | 0.0016 | 2026-10-29 | CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information | |
CVE-2026-3007 |
medium | 5.4 | 0.0017 | 2026-10-29 | Successful exploitation of the stored cross-site scripting (XSS) vulnerability could allow | |
CVE-2026-41679 |
critical | 10.0 | 0.3167 | 2026-10-29 | Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a | |
CVE-2026-41243 |
medium | 6.9 | 0.0018 | 2026-10-29 | OpenLearn is open-source educational forum software. Prior to commit 844b2a40a69d0c4911580 | |
CVE-2026-41211 |
high | 8.4 | 0.0031 | 2026-10-29 | Vite+ is a unified toolchain and entry point for web development. Prior to version 0.1.17, | |
CVE-2026-41208 |
high | 8.8 | 0.0059 | 2026-10-29 | Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a | |
CVE-2026-41206 |
medium | 6.9 | 0.0019 | 2026-10-29 | PySpector is a static analysis security testing (SAST) Framework engineered for modern Pyt | |
CVE-2026-41200 |
high | 8.5 | 0.0038 | 2026-10-29 | STIG Manager is an API and web client for managing Security Technical Implementation Guid | |
CVE-2026-41182 |
medium | 5.3 | 0.0021 | 2026-10-29 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to | |
CVE-2026-41180 |
high | 7.5 | 0.0039 | 2026-10-29 | PsiTransfer is an open source, self-hosted file sharing solution. Prior to version 2.4.3, | |
CVE-2026-6878 |
low | 2.9 | 0.0033 | 2026-10-29 | A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function mat | |
CVE-2026-6874 |
low | 2.1 | 0.0026 | 2026-10-29 | A vulnerability was determined in ericc-ch copilot-api up to 0.7.0. This impacts an unknow | |
CVE-2026-5935 |
critical | 9.8 | 0.0034 | 2026-10-29 | IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC cou | |
CVE-2026-5926 |
medium | 6.5 | 0.0018 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-4919 |
medium | 4.8 | 0.0019 | 2026-10-29 | IBM Guardium Data Protection 12.1 is vulnerable to cross-site scripting. This vulnerabilit | |
CVE-2026-4918 |
medium | 4.8 | 0.0014 | 2026-10-29 | IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting. This vulne | |
CVE-2026-4917 |
medium | 4.9 | 0.0036 | 2026-10-29 | IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directori | |
CVE-2026-40062 |
high | 8.7 | 0.0062 | 2026-10-29 | A path Traversal vulnerability exists in Ziostation2 v2.9.8.7 and earlier. A remote unauth | |
CVE-2026-3621 |
medium | 5.9 | 0.0028 | 2026-10-29 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Applica | |
CVE-2026-32679 |
high | 8.4 | 0.0016 | 2026-10-29 | The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5 | |
CVE-2026-29198 |
critical | 9.8 | 0.0042 | 2026-10-29 | In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a N | |
CVE-2026-1726 |
medium | 4.8 | 0.0019 | 2026-10-29 | IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 enables privilege | |
CVE-2026-1352 |
medium | 6.5 | 0.0033 | 2026-10-29 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (incl | |
CVE-2026-1274 |
medium | 4.9 | 0.0030 | 2026-10-29 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a Bypass Business Logic | |
CVE-2026-1272 |
medium | 4.3 | 0.0020 | 2026-10-29 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to Security Misconfigurati | |
CVE-2026-41175 |
high | 8.1 | 0.0030 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5 | |
CVE-2026-40517 |
high | 8.4 | 0.0105 | 2026-10-29 | radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's prin | |
CVE-2026-41167 |
critical | 9.1 | 0.0064 | 2026-10-29 | Jellystat is a free and open source Statistics App for Jellyfin. Prior to version 1.1.10, | |
CVE-2026-41134 |
high | 7.3 | 0.0042 | 2026-10-29 | Kiota is an OpenAPI based HTTP Client code generator. Versions prior to 1.29.1 and 1.31.1 | |
CVE-2026-34068 |
medium | 6.8 | 0.0020 | 2026-10-29 | nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementa | |
CVE-2026-34067 |
medium | 6.5 | 0.0032 | 2026-10-29 | nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementa | |
CVE-2026-6019 |
low | 2.1 | 0.0021 | 2026-10-29 | http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for | |
CVE-2026-34066 |
medium | 5.3 | 0.0024 | 2026-10-29 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. Prior | |
CVE-2026-34065 |
high | 7.5 | 0.0037 | 2026-10-29 | nimiq-primitives contains primitives (e.g., block, account, transaction) to be used in Nim | |
CVE-2026-34064 |
high | 8.2 | 0.0027 | 2026-10-29 | nimiq-account contains account primitives to be used in Nimiq's Rust implementation. Prior | |
CVE-2026-34063 |
high | 7.5 | 0.0035 | 2026-10-29 | Nimiq's network-libp2p is a Nimiq network implementation based on libp2p. Prior to version | |
CVE-2026-34062 |
medium | 5.3 | 0.0030 | 2026-10-29 | nimiq-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `M | |
CVE-2026-33471 |
critical | 9.6 | 0.0022 | 2026-10-29 | nimiq-block contains block primitives to be used in Nimiq's Rust implementation. `SkipBloc | |
CVE-2026-41469 |
medium | 5.1 | 0.0020 | 2026-10-29 | Beghelli Sicuro24 SicuroWeb does not enforce a Content Security Policy, allowing unrestric | |
CVE-2026-41468 |
critical | 9.3 | 0.0039 | 2026-10-29 | Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing kn | |
CVE-2026-41459 |
medium | 6.9 | 0.0080 | 2026-10-29 | Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerab | |
CVE-2026-34415 |
critical | 9.3 | 0.0357 | 2026-10-29 | Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input validation vul | |
CVE-2026-34414 |
high | 7.1 | 0.0283 | 2026-10-29 | Xerte Online Toolkits versions 3.15 and earlier contain a relative path traversal vulnerab |