Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-6756 |
high | 7.5 | 0.0027 | 2026-10-29 | Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150. | |
CVE-2026-6755 |
medium | 6.5 | 0.0025 | 2026-10-29 | Mitigation bypass in the DOM: postMessage component. This vulnerability was fixed in Firef | |
CVE-2026-6754 |
— | — | 0.0039 | 2026-10-29 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox | |
CVE-2026-6753 |
— | — | 0.0031 | 2026-10-29 | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Fir | |
CVE-2026-6752 |
— | — | 0.0031 | 2026-10-29 | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Fir | |
CVE-2026-6751 |
— | — | 0.0031 | 2026-10-29 | Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixe | |
CVE-2026-6750 |
— | — | 0.0048 | 2026-10-29 | Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in | |
CVE-2026-6749 |
— | — | 0.0040 | 2026-10-29 | Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. Th | |
CVE-2026-6748 |
— | — | 0.0040 | 2026-10-29 | Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixe | |
CVE-2026-6747 |
— | — | 0.0040 | 2026-10-29 | Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firef | |
CVE-2026-6746 |
— | — | 0.0095 | 2026-10-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox | |
CVE-2026-40520 |
high | 8.6 | 0.0138 | 2026-10-29 | FreePBX api module version 17.0.8 and prior contain a command injection vulnerability in t | |
CVE-2026-32147 |
medium | 5.3 | 0.0037 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-41039 |
high | 8.7 | 0.0026 | 2026-10-29 | This vulnerability exists in Quantum Networks router due to improper access control and in | |
CVE-2026-41038 |
high | 7.6 | 0.0017 | 2026-10-29 | This vulnerability exists in Quantum Networks router due to lack of enforcement of strong | |
CVE-2026-6553 |
high | 7.3 | 0.0017 | 2026-10-29 | Changing backend users' passwords via the user settings module results in storing the clea | |
CVE-2026-41037 |
high | 8.7 | 0.0020 | 2026-10-29 | This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPT | |
CVE-2026-41036 |
high | 8.7 | 0.0045 | 2026-10-29 | This vulnerability exists in Quantum Networks router due to inadequate sanitization of use | |
CVE-2026-3317 |
medium | 5.1 | 0.0034 | 2026-10-29 | Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System. | |
CVE-2026-31370 |
medium | 6.3 | 0.0019 | 2026-10-29 | Honor E APP is affected by information leak vulnerability, successful exploitation of this | |
CVE-2026-31369 |
low | 3.2 | 0.0010 | 2026-10-29 | PcManager is affected by type privilege bypass, successful exploitation of this vulnerabil | |
CVE-2026-31368 |
high | 7.8 | 0.0014 | 2026-10-29 | AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerab | |
CVE-2026-5965 |
critical | 9.3 | 0.0164 | 2026-10-29 | NewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthe | |
CVE-2026-6058 |
medium | 5.7 | 0.0018 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** An improper encoding or escaping vulnerability in the CGI | |
CVE-2026-40250 |
high | 8.4 | 0.0045 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-40244 |
high | 8.4 | 0.0043 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-39973 |
high | 7.1 | 0.0018 | 2026-10-29 | Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, | |
CVE-2026-39886 |
medium | 5.3 | 0.0030 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-39866 |
high | 7.4 | 0.0235 | 2026-10-29 | Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a39 | |
CVE-2026-39861 |
high | 7.7 | 0.0071 | 2026-10-29 | Claude Code is an agentic coding tool. Prior to version 2.1.64, Claude Code's sandbox did | |
CVE-2026-39386 |
high | 8.8 | 0.0044 | 2026-10-29 | Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3. | |
CVE-2026-39378 |
medium | 6.5 | 0.0031 | 2026-10-29 | The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats | |
CVE-2026-39377 |
medium | 6.5 | 0.0027 | 2026-10-29 | The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats | |
CVE-2026-39320 |
high | 7.5 | 0.0043 | 2026-10-29 | Signal K Server is a server application that runs on a central hub in a boat. Versions pri | |
CVE-2026-35588 |
medium | 6.3 | 0.0021 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, t | |
CVE-2026-35587 |
high | 7.3 | 0.0040 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, a | |
CVE-2026-35570 |
high | 8.4 | 0.0023 | 2026-10-29 | OpenClaude is an open-source coding-agent command line interface for cloud and local model | |
CVE-2026-34839 |
high | 7.7 | 0.0041 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, t | |
CVE-2026-34082 |
medium | 5.3 | 0.0019 | 2026-10-29 | Dify is an open-source LLM app development platform. Prior to 1.13.1, the method `DELETE / | |
CVE-2026-6729 |
medium | 5.3 | 0.0020 | 2026-10-29 | HKUDS OpenHarness prior to PR #159 remediation contains a session key derivation vulnerabi | |
CVE-2026-22051 |
low | 2.3 | 0.0018 | 2026-10-29 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are s | |
CVE-2026-0930 |
low | 2.3 | 0.0017 | 2026-10-29 | Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resiz | |
CVE-2026-34403 |
medium | 5.5 | 0.0018 | 2026-10-29 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.5, all Web | |
CVE-2026-33626 |
high | 7.5 | 0.4525 | 2026-10-29 | LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versi | |
CVE-2026-33031 |
high | 8.6 | 0.0027 | 2026-10-29 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, a user | |
CVE-2026-6550 |
medium | 5.7 | 0.0010 | 2026-10-29 | Cryptographic algorithm downgrade in the caching layer of Amazon AWS Encryption SDK for Py | |
CVE-2026-6257 |
critical | 9.2 | 0.0063 | 2026-10-29 | Vvveb CMS before 1.0.8.2 contains a remote code execution vulnerability in its media manag | |
CVE-2026-6249 |
high | 8.7 | 0.0062 | 2026-10-29 | Vvveb CMS 1.0.8.2 contains a remote code execution vulnerability in its media upload handl | |
CVE-2026-32311 |
critical | 9.3 | 0.0051 | 2026-10-29 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investi | |
CVE-2026-23758 |
medium | 6.4 | 0.0015 | 2026-10-29 | GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the tic |