Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40347 |
medium | 5.3 | 0.0035 | 2026-10-29 | Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have | |
CVE-2026-40346 |
medium | 6.4 | 0.0038 | 2026-10-29 | NocoBase is an AI-powered no-code/low-code platform for building business applications and | |
CVE-2026-40341 |
low | 3.5 | 0.0019 | 2026-10-29 | libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, | |
CVE-2026-40340 |
medium | 6.1 | 0.0022 | 2026-10-29 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 hav | |
CVE-2026-40339 |
medium | 5.2 | 0.0020 | 2026-10-29 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 hav | |
CVE-2026-40338 |
medium | 5.2 | 0.0020 | 2026-10-29 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 hav | |
CVE-2026-40337 |
medium | 5.1 | 0.0015 | 2026-10-29 | The Sentry kernel is a high security level micro-kernel implementation made for high secur | |
CVE-2026-40336 |
low | 2.4 | 0.0018 | 2026-10-29 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 hav | |
CVE-2026-40335 |
medium | 5.2 | 0.0020 | 2026-10-29 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 hav | |
CVE-2026-40334 |
low | 3.5 | 0.0019 | 2026-10-29 | libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, | |
CVE-2026-40333 |
medium | 6.1 | 0.0022 | 2026-10-29 | libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, | |
CVE-2026-40324 |
critical | 9.1 | 0.0090 | 2026-10-29 | Hot Chocolate is an open-source GraphQL server. Prior to versions 12.22.7, 13.9.16, 14.3.1 | |
CVE-2026-40323 |
high | 8.9 | 0.0019 | 2026-10-29 | SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs comp | |
CVE-2026-5720 |
high | 7.1 | 0.0067 | 2026-10-29 | miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that al | |
CVE-2026-40478 |
— | — | 0.0110 | 2026-10-29 | Thymeleaf is a server-side Java template engine for web and standalone environments. Versi | |
CVE-2026-40477 |
— | — | 0.0085 | 2026-10-29 | Thymeleaf is a server-side Java template engine for web and standalone environments. Versi | |
CVE-2026-40476 |
medium | 6.9 | 0.0085 | 2026-10-29 | graphql-go is a Go implementation of GraphQL. In versions 15.31.4 and below, the Overlappi | |
CVE-2026-40352 |
high | 8.8 | 0.0038 | 2026-10-29 | FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password chan | |
CVE-2026-40351 |
critical | 9.8 | 0.0063 | 2026-10-29 | FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-base | |
CVE-2026-40321 |
high | 8.0 | 0.0641 | 2026-10-29 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the M | |
CVE-2026-40306 |
medium | 6.9 | 0.0018 | 2026-10-29 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the M | |
CVE-2026-40305 |
medium | 4.3 | 0.0018 | 2026-10-29 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the M | |
CVE-2026-40304 |
medium | 5.3 | 0.0029 | 2026-10-29 | zrok is software for sharing web services, files, and network resources. Prior to version | |
CVE-2026-40258 |
critical | 9.1 | 0.0040 | 2026-10-29 | The Gramps Web API is a Python REST API for the genealogical research software Gramps. Ver | |
CVE-2026-40527 |
high | 8.5 | 0.0092 | 2026-10-29 | radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afs | |
CVE-2026-40303 |
high | 7.5 | 0.0045 | 2026-10-29 | zrok is software for sharing web services, files, and network resources. Prior to version | |
CVE-2026-40302 |
medium | 6.1 | 0.0021 | 2026-10-29 | zrok is software for sharing web services, files, and network resources. Prior to version | |
CVE-2026-40301 |
medium | 4.7 | 0.0032 | 2026-10-29 | DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.10, DOMSanit | |
CVE-2026-40299 |
medium | 6.9 | 0.0034 | 2026-10-29 | next-intl provides internationalization for Next.js. Applications using the `next-intl` mi | |
CVE-2026-40286 |
high | 7.5 | 0.0021 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored | |
CVE-2026-40285 |
high | 8.8 | 0.0032 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Versions prior to 3.6.10 contain a SQL | |
CVE-2026-40284 |
medium | 6.8 | 0.0023 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored | |
CVE-2026-40282 |
medium | 6.4 | 0.0026 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored | |
CVE-2026-40196 |
high | 8.1 | 0.0025 | 2026-10-29 | HomeBox is a home inventory and organization system. Versions prior to 0.25.0 contain a vu | |
CVE-2026-35603 |
medium | 5.4 | 0.0011 | 2026-10-29 | Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code | |
CVE-2026-35512 |
high | 8.7 | 0.0058 | 2026-10-29 | xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overfl | |
CVE-2026-33689 |
high | 8.7 | 0.0048 | 2026-10-29 | xrdp is an open source RDP server. Versions through 0.10.5 have an out-of-bounds read vuln | |
CVE-2026-33436 |
medium | 6.1 | 0.0017 | 2026-10-29 | Stirling-PDF is a locally hosted web application that facilitates various operations on PD | |
CVE-2026-33145 |
medium | 6.3 | 0.0036 | 2026-10-29 | xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote u | |
CVE-2026-40461 |
high | 7.5 | 0.0029 | 2026-10-29 | Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug | |
CVE-2026-40434 |
high | 8.1 | 0.0023 | 2026-10-29 | Anviz CrossChex Standard lacks source verification in the client/server channel, enabling | |
CVE-2026-40342 |
critical | 9.9 | 0.0069 | 2026-10-29 | Firebird is an open-source relational database management system. In versions prior to 5.0 | |
CVE-2026-40283 |
high | 7.6 | 0.0020 | 2026-10-29 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored | |
CVE-2026-40066 |
high | 8.8 | 0.0041 | 2026-10-29 | Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. | |
CVE-2026-35682 |
high | 8.8 | 0.0179 | 2026-10-29 | Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename paramet | |
CVE-2026-35546 |
critical | 9.8 | 0.0059 | 2026-10-29 | Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes cra | |
CVE-2026-35215 |
high | 7.5 | 0.0047 | 2026-10-29 | Firebird is an open-source relational database management system. In versions prior to 5.0 | |
CVE-2026-35061 |
medium | 5.3 | 0.0030 | 2026-10-29 | Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be ret | |
CVE-2026-34232 |
high | 7.5 | 0.0047 | 2026-10-29 | Firebird is an open-source relational database management system. In versions prior to 5.0 | |
CVE-2026-33569 |
medium | 6.5 | 0.0019 | 2026-10-29 | Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attacker |