Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-22008 |
low | 3.7 | 0.0021 | 2026-10-29 | Vulnerability in Oracle Java SE (component: Libraries). The supported version that is af | |
CVE-2026-22007 |
low | 2.9 | 0.0012 | 2026-10-29 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edi | |
CVE-2026-22006 |
medium | 5.4 | 0.0017 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSof | |
CVE-2026-22005 |
medium | 4.9 | 0.0032 | 2026-10-29 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). | |
CVE-2026-22004 |
medium | 4.9 | 0.0032 | 2026-10-29 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported | |
CVE-2026-22003 |
medium | 6.0 | 0.0010 | 2026-10-29 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle J | |
CVE-2026-22002 |
medium | 4.9 | 0.0032 | 2026-10-29 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). | |
CVE-2026-22001 |
low | 2.7 | 0.0026 | 2026-10-29 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information | |
CVE-2026-21999 |
medium | 5.3 | 0.0024 | 2026-10-29 | Vulnerability in the XML Database component of Oracle Database Server. Supported versions | |
CVE-2026-21998 |
medium | 4.9 | 0.0032 | 2026-10-29 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). | |
CVE-2026-21997 |
high | 8.5 | 0.0020 | 2026-10-29 | Vulnerability in the Oracle Life Sciences Empirica Signal product of Oracle Life Science A | |
CVE-2026-6819 |
high | 8.7 | 0.0029 | 2026-10-29 | HKUDS OpenHarness prior to PR #156 remediation exposes plugin lifecycle commands including | |
CVE-2026-41320 |
medium | 6.5 | 0.0022 | 2026-10-29 | Frappe HR is an open-source human resources management solution (HRMS). Prior to versions | |
CVE-2026-40909 |
medium | 6.5 | 0.0066 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, the locale save | |
CVE-2026-40908 |
medium | 5.3 | 0.0025 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, the file `git.js | |
CVE-2026-40907 |
medium | 6.5 | 0.0027 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, the endpoint `pl | |
CVE-2026-40903 |
critical | 9.1 | 0.0024 | 2026-10-29 | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.6, goshs has an ArtiPACKED | |
CVE-2026-40890 |
high | 7.5 | 0.0035 | 2026-10-29 | The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and | |
CVE-2026-40889 |
medium | 6.5 | 0.0023 | 2026-10-29 | Frappe HR is an open-source human resources management solution (HRMS). Prior to versions | |
CVE-2026-40888 |
medium | 6.5 | 0.0023 | 2026-10-29 | Frappe HR is an open-source human resources management solution (HRMS). Prior to versions | |
CVE-2026-40887 |
critical | 9.1 | 0.0176 | 2026-10-29 | Vendure is an open-source headless commerce platform. Starting in version 1.7.4 and prior | |
CVE-2026-40885 |
high | 7.7 | 0.0031 | 2026-10-29 | goshs is a SimpleHTTPServer written in Go. From 2.0.0-beta.4 to 2.0.0-beta.5, goshs leaks | |
CVE-2026-40884 |
critical | 9.8 | 0.0048 | 2026-10-29 | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.6, goshs contains an SFTP a | |
CVE-2026-40883 |
medium | 6.1 | 0.0014 | 2026-10-29 | goshs is a SimpleHTTPServer written in Go. From 2.0.0-beta.4 to 2.0.0-beta.5, goshs contai | |
CVE-2026-40881 |
medium | 6.3 | 0.0026 | 2026-10-29 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-ne | |
CVE-2026-40880 |
high | 7.2 | 0.0026 | 2026-10-29 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and zebra-co | |
CVE-2026-40879 |
high | 7.5 | 0.0033 | 2026-10-29 | Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1. | |
CVE-2026-40878 |
low | 2.1 | 0.0080 | 2026-10-29 | mailcow: dockerized is an open source groupware/email suite based on docker. In versions p | |
CVE-2026-40876 |
high | 8.7 | 0.0044 | 2026-10-29 | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.6, goshs contains an SFTP r | |
CVE-2026-40875 |
high | 7.0 | 0.0024 | 2026-10-29 | mailcow: dockerized is an open source groupware/email suite based on docker. In versions p | |
CVE-2026-40874 |
medium | 6.0 | 0.0017 | 2026-10-29 | mailcow: dockerized is an open source groupware/email suite based on docker. In versions p | |
CVE-2026-40873 |
high | 8.9 | 0.0042 | 2026-10-29 | mailcow: dockerized is an open source groupware/email suite based on docker. In versions p | |
CVE-2026-40872 |
critical | 9.3 | 0.0036 | 2026-10-29 | mailcow: dockerized is an open source groupware/email suite based on docker. In versions p | |
CVE-2026-40871 |
high | 7.2 | 0.0857 | 2026-10-29 | mailcow: dockerized is an open source groupware/email suite based on docker. Versions prio | |
CVE-2026-40372 |
— | — | 0.1120 | 2026-10-29 | Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized at | |
CVE-2026-33813 |
high | 7.5 | 0.0034 | 2026-10-29 | Parsing a WEBP image with an invalid, large size panics on 32-bit platforms. | |
CVE-2026-33812 |
medium | 6.1 | 0.0011 | 2026-10-29 | Parsing a malicious font file can cause excessive memory allocation. | |
CVE-2026-40865 |
high | 7.1 | 0.0017 | 2026-10-29 | Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, an in | |
CVE-2026-40614 |
high | 8.5 | 0.0022 | 2026-10-29 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and | |
CVE-2026-22751 |
medium | 4.8 | 0.0012 | 2026-10-29 | Vulnerability in Spring Spring Security. Applications that explicitly configure One-Time T | |
CVE-2026-41192 |
high | 7.1 | 0.0024 | 2026-10-29 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, th | |
CVE-2026-40611 |
— | — | 0.0042 | 2026-10-29 | Let's Encrypt client and ACME library written in Go (Lego). Prior to 4.34.0, the webroot H | |
CVE-2026-40608 |
medium | 5.5 | 0.0015 | 2026-10-29 | Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io | |
CVE-2026-40604 |
high | 8.2 | 0.0010 | 2026-10-29 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access | |
CVE-2026-40602 |
medium | 5.6 | 0.0010 | 2026-10-29 | The Home Assistant Command-line interface (hass-cli) is a command-line tool for Home Assis | |
CVE-2026-40599 |
high | 8.4 | 0.0013 | 2026-10-29 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access | |
CVE-2026-40588 |
high | 8.1 | 0.0027 | 2026-10-29 | blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, the password chang | |
CVE-2026-40587 |
medium | 6.5 | 0.0024 | 2026-10-29 | blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, when a user change | |
CVE-2026-6743 |
low | 2.0 | 0.0019 | 2026-10-29 | A vulnerability has been found in WebSystems WebTOTUM 2026. This impacts an unknown functi | |
CVE-2026-5652 |
critical | 9.0 | 0.0044 | 2026-10-29 | An insecure direct object reference vulnerability in the Users API component of Crafty Con |