Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40586 |
high | 7.5 | 0.0037 | 2026-10-29 | blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, the login form han | |
CVE-2026-40585 |
high | 7.4 | 0.0026 | 2026-10-29 | blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, when a password re | |
CVE-2026-40583 |
high | 8.8 | 0.0038 | 2026-10-29 | UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker c | |
CVE-2026-40576 |
— | — | 0.0046 | 2026-10-29 | excel-mcp-server is a Model Context Protocol server for Excel file manipulation. A path tr | |
CVE-2026-40161 |
medium | 6.5 | 0.0026 | 2026-10-29 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. | |
CVE-2026-40050 |
critical | 9.8 | 0.0060 | 2026-10-29 | CrowdStrike has released security updates to address a critical unauthenticated path trave | |
CVE-2026-35451 |
medium | 5.7 | 0.0031 | 2026-10-29 | Twenty is an open source CRM. Prior to 1.20.6, a Stored Cross-Site Scripting (XSS) vulnera | |
CVE-2026-29179 |
low | 3.3 | 0.0014 | 2026-10-29 | October is a Content Management System (CMS) and web platform. Prior to 3.7.16 and 4.1.16, | |
CVE-2026-27937 |
low | 3.1 | 0.0014 | 2026-10-29 | October is a Content Management System (CMS) and web platform. Prior to 3.7.16 and 4.1.16, | |
CVE-2026-26274 |
medium | 6.6 | 0.0023 | 2026-10-29 | October is a Content Management System (CMS) and web platform. Prior to 3.7.14 and 4.1.10, | |
CVE-2026-26067 |
medium | 4.9 | 0.0025 | 2026-10-29 | October is a Content Management System (CMS) and web platform. Prior to 3.7.14 and 4.1.10, | |
CVE-2026-25542 |
medium | 6.5 | 0.0026 | 2026-10-29 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. | |
CVE-2026-24189 |
high | 8.2 | 0.0032 | 2026-10-29 | NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker c | |
CVE-2026-24177 |
high | 7.7 | 0.0024 | 2026-10-29 | NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints | |
CVE-2026-24176 |
medium | 4.3 | 0.0019 | 2026-10-29 | NVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper autho | |
CVE-2026-21571 |
critical | 9.4 | 0.0135 | 2026-10-29 | This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0 | |
CVE-2026-3298 |
high | 8.8 | 0.0039 | 2026-10-29 | The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missin | |
CVE-2026-31014 |
medium | 6.3 | 0.0010 | 2026-10-29 | Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery ( | |
CVE-2026-31013 |
medium | 6.1 | 0.0019 | 2026-10-29 | Dovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS) vulne | |
CVE-2026-1089 |
medium | 6.5 | 0.0023 | 2026-10-29 | User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows atta | |
CVE-2026-0972 |
medium | 5.4 | 0.0015 | 2026-10-29 | HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to | |
CVE-2026-0971 |
medium | 4.3 | 0.0018 | 2026-10-29 | An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 resul | |
CVE-2026-6784 |
— | — | 0.0036 | 2026-10-29 | Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bugs showed e | |
CVE-2026-6783 |
medium | 5.3 | 0.0023 | 2026-10-29 | Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. Th | |
CVE-2026-6782 |
high | 7.5 | 0.0025 | 2026-10-29 | Information disclosure in the IP Protection component. This vulnerability was fixed in Fir | |
CVE-2026-6781 |
high | 7.5 | 0.0029 | 2026-10-29 | Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in | |
CVE-2026-6780 |
high | 7.5 | 0.0029 | 2026-10-29 | Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in | |
CVE-2026-6779 |
medium | 5.3 | 0.0021 | 2026-10-29 | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 15 | |
CVE-2026-6778 |
medium | 5.3 | 0.0026 | 2026-10-29 | Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Fi | |
CVE-2026-6777 |
medium | 5.3 | 0.0016 | 2026-10-29 | Other issue in the Networking: DNS component. This vulnerability was fixed in Firefox 150 | |
CVE-2026-6776 |
high | 7.8 | 0.0011 | 2026-10-29 | Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was | |
CVE-2026-6775 |
medium | 5.3 | 0.0021 | 2026-10-29 | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Fir | |
CVE-2026-6774 |
medium | 5.4 | 0.0015 | 2026-10-29 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox | |
CVE-2026-6773 |
high | 7.5 | 0.0032 | 2026-10-29 | Denial-of-service due to integer overflow in the Graphics: WebGPU component. This vulnerab | |
CVE-2026-6772 |
high | 7.5 | 0.0039 | 2026-10-29 | Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fi | |
CVE-2026-6771 |
critical | 9.8 | 0.0031 | 2026-10-29 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox | |
CVE-2026-6770 |
medium | 6.5 | 0.0388 | 2026-10-29 | Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 1 | |
CVE-2026-6769 |
high | 8.8 | 0.0023 | 2026-10-29 | Privilege escalation in the Debugger component. This vulnerability was fixed in Firefox 15 | |
CVE-2026-6768 |
critical | 9.8 | 0.0029 | 2026-10-29 | Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Fi | |
CVE-2026-6767 |
medium | 5.3 | 0.0023 | 2026-10-29 | Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150 | |
CVE-2026-6766 |
high | 7.5 | 0.0026 | 2026-10-29 | Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fi | |
CVE-2026-6765 |
medium | 5.3 | 0.0022 | 2026-10-29 | Information disclosure in the Form Autofill component. This vulnerability was fixed in Fir | |
CVE-2026-6764 |
medium | 6.5 | 0.0023 | 2026-10-29 | Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability | |
CVE-2026-6763 |
medium | 6.5 | 0.0019 | 2026-10-29 | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox | |
CVE-2026-6762 |
medium | 6.3 | 0.0019 | 2026-10-29 | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox | |
CVE-2026-6761 |
high | 8.8 | 0.0022 | 2026-10-29 | Privilege escalation in the Networking component. This vulnerability was fixed in Firefox | |
CVE-2026-6760 |
critical | 9.8 | 0.0028 | 2026-10-29 | Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Fi | |
CVE-2026-6759 |
high | 7.5 | 0.0036 | 2026-10-29 | Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150 | |
CVE-2026-6758 |
high | 7.5 | 0.0081 | 2026-10-29 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in F | |
CVE-2026-6757 |
medium | 6.3 | 0.0049 | 2026-10-29 | Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in |