Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-23757 |
medium | 5.1 | 0.0014 | 2026-10-29 | GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Re | |
CVE-2026-23756 |
medium | 5.1 | 0.0014 | 2026-10-29 | GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Tro | |
CVE-2026-23753 |
medium | 4.8 | 0.0015 | 2026-10-29 | GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the lan | |
CVE-2026-23752 |
medium | 4.8 | 0.0015 | 2026-10-29 | GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the tem | |
CVE-2026-6662 |
medium | 5.5 | 0.0018 | 2026-10-29 | A vulnerability was found in ericc-ch copilot-api up to 0.7.0. The impacted element is the | |
CVE-2026-41445 |
high | 8.7 | 0.0029 | 2026-10-29 | KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftnd | |
CVE-2026-40488 |
high | 8.7 | 0.0069 | 2026-10-29 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alt | |
CVE-2026-40098 |
medium | 5.3 | 0.0018 | 2026-10-29 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alt | |
CVE-2026-35154 |
medium | 6.7 | 0.0009 | 2026-10-29 | Dell PowerProtect Data Domain appliances, versions 7.7.1.0 through 8.6.0.0 and version 8.7 | |
CVE-2026-28684 |
medium | 6.6 | 0.0025 | 2026-10-29 | python-dotenv reads key-value pairs from a .env file and can set them as environment varia | |
CVE-2026-26951 |
medium | 6.7 | 0.0013 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1 | |
CVE-2026-26943 |
high | 7.2 | 0.0119 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1 | |
CVE-2026-26942 |
high | 7.2 | 0.0088 | 2026-10-29 | Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralizat | |
CVE-2026-25525 |
medium | 4.9 | 0.0050 | 2026-10-29 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alt | |
CVE-2026-25524 |
high | 8.1 | 0.0063 | 2026-10-29 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alt | |
CVE-2026-24506 |
high | 7.2 | 0.0119 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1 | |
CVE-2026-24505 |
high | 7.2 | 0.0042 | 2026-10-29 | Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validati | |
CVE-2026-24504 |
high | 7.2 | 0.0044 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1 | |
CVE-2026-22761 |
high | 7.2 | 0.0116 | 2026-10-29 | Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulner | |
CVE-2026-6652 |
low | 2.0 | 0.0024 | 2026-10-29 | A weakness has been identified in Pagekit CMS up to 1.0.18. This issue affects the functio | |
CVE-2026-6651 |
low | 1.9 | 0.0021 | 2026-10-29 | A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0. This vulnerab | |
CVE-2026-6066 |
high | 7.1 | 0.0008 | 2026-10-29 | ConnectWise has released a security update for ConnectWise Automate™ that addresses a beha | |
CVE-2026-40896 |
high | 7.1 | 0.0017 | 2026-10-29 | OpenProject is open-source, web-based project management software. Prior to version 17.3.0 | |
CVE-2026-3219 |
medium | 4.6 | 0.0014 | 2026-10-29 | pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether | |
CVE-2026-39918 |
critical | 9.2 | 0.0066 | 2026-10-29 | Vvveb prior to 1.0.8.1 contains a code injection vulnerability in the installation endpoin | |
CVE-2026-34429 |
medium | 5.1 | 0.0028 | 2026-10-29 | Vvveb prior to 1.0.8.1 contains a stored cross-site scripting vulnerability that allows au | |
CVE-2026-34428 |
high | 8.3 | 0.0026 | 2026-10-29 | Vvveb prior to 1.0.8.1 contains a server-side request forgery vulnerability in the oEmbedP | |
CVE-2026-34427 |
high | 8.7 | 0.0056 | 2026-10-29 | Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user pro | |
CVE-2026-26944 |
high | 8.8 | 0.0054 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1 | |
CVE-2026-23774 |
high | 7.2 | 0.0147 | 2026-10-29 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release | |
CVE-2026-6649 |
low | 2.1 | 0.0021 | 2026-10-29 | A vulnerability was determined in Qibo CMS 1.0. Affected by this issue is some unknown fun | |
CVE-2026-6369 |
medium | 5.7 | 0.0012 | 2026-10-29 | An improper access control vulnerability in the canonical-livepatch snap client prior to v | |
CVE-2026-4048 |
high | 7.2 | 0.0213 | 2026-10-29 | OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products al | |
CVE-2026-3519 |
high | 7.2 | 0.0213 | 2026-10-29 | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products a | |
CVE-2026-3518 |
high | 7.2 | 0.1688 | 2026-10-29 | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products a | |
CVE-2026-3517 |
high | 7.2 | 0.1549 | 2026-10-29 | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products a | |
CVE-2026-33558 |
medium | 5.3 | 0.0063 | 2026-10-29 | Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient | |
CVE-2026-33557 |
— | — | 0.0090 | 2026-10-29 | A possible security vulnerability has been identified in Apache Kafka. By default, the br | |
CVE-2026-6648 |
low | 2.0 | 0.0019 | 2026-10-29 | A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown fu | |
CVE-2026-6636 |
low | 2.1 | 0.0047 | 2026-10-29 | A vulnerability was detected in p2r3 convert up to 6998584ace3e11db66dff0b423612a5cf91de75 | |
CVE-2026-6635 |
medium | 5.5 | 0.0047 | 2026-10-29 | A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impac | |
CVE-2026-6634 |
low | 2.1 | 0.0025 | 2026-10-29 | A weakness has been identified in usememos memos up to 0.22.1. This affects the function m | |
CVE-2026-6633 |
low | 2.0 | 0.0025 | 2026-10-29 | A security flaw has been discovered in Yifang CMS up to 2.0.5. The impacted element is the | |
CVE-2026-5958 |
low | 2.1 | 0.0014 | 2026-10-29 | When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_ | |
CVE-2026-6654 |
medium | 5.1 | 0.0017 | 2026-10-29 | Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions | |
CVE-2026-6632 |
high | 7.4 | 0.0045 | 2026-10-29 | A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is t | |
CVE-2026-6631 |
high | 7.4 | 0.0054 | 2026-10-29 | A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function | |
CVE-2026-6630 |
high | 7.4 | 0.0045 | 2026-10-29 | A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the functio | |
CVE-2026-6629 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0. This vulnerability af | |
CVE-2026-6628 |
low | 2.1 | 0.0020 | 2026-10-29 | A flaw has been found in phili67 Ecclesia CRM up to 8.0.0. This affects the function Valid |