Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40916 |
medium | 5.0 | 0.0022 | 2026-10-29 | A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's | |
CVE-2026-40915 |
high | 7.8 | 0.0039 | 2026-10-29 | A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerabilit | |
CVE-2026-39857 |
medium | 5.3 | 0.0045 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and pri | |
CVE-2026-35569 |
high | 8.7 | 0.0031 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and pri | |
CVE-2026-33889 |
medium | 5.4 | 0.0023 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and pri | |
CVE-2026-33888 |
medium | 5.3 | 0.0053 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and pri | |
CVE-2026-33877 |
low | 3.7 | 0.0038 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and pri | |
CVE-2026-21727 |
low | 3.3 | 0.0021 | 2026-10-29 | A cross-tenant isolation vulnerability was found in Grafana’s Correlations feature affecti | |
CVE-2026-21726 |
medium | 5.3 | 0.0043 | 2026-10-29 | The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences afte | |
CVE-2026-6383 |
medium | 5.4 | 0.0016 | 2026-10-29 | A flaw was found in KubeVirt's Role-Based Access Control (RBAC) evaluation logic. The auth | |
CVE-2026-6245 |
medium | 5.5 | 0.0016 | 2026-10-29 | A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read | |
CVE-2026-5189 |
critical | 9.2 | 0.0055 | 2026-10-29 | CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 | |
CVE-2026-4857 |
high | 8.4 | 0.0028 | 2026-10-29 | IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all Id | |
CVE-2026-40256 |
medium | 5.0 | 0.0034 | 2026-10-29 | Weblate is a web based localization tool. In versions prior to 5.17, repository-boundary v | |
CVE-2026-39845 |
medium | 4.1 | 0.0029 | 2026-10-29 | Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on di | |
CVE-2026-34632 |
high | 8.6 | 0.0028 | 2026-10-29 | Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerabilit | |
CVE-2026-34393 |
high | 8.8 | 0.0041 | 2026-10-29 | Weblate is a web based localization tool. In versions prior to 5.17, the user patching API | |
CVE-2026-34244 |
medium | 5.0 | 0.0026 | 2026-10-29 | Weblate is a web based localization tool. In versions prior to 5.17, a user with the proje | |
CVE-2026-34242 |
high | 7.7 | 0.0048 | 2026-10-29 | Weblate is a web based localization tool. In versions prior to 5.17, the ZIP download feat | |
CVE-2026-33667 |
high | 7.4 | 0.0031 | 2026-10-29 | OpenProject is an open-source project management application. In versions prior to 17.3.0, | |
CVE-2026-33440 |
medium | 5.0 | 0.0025 | 2026-10-29 | Weblate is a web based localization tool. In versions prior to 5.17, the ALLOWED_ASSET_DOM | |
CVE-2026-33435 |
high | 8.0 | 0.0072 | 2026-10-29 | Weblate is a web based localization tool. In versions prior to 5.17, the project backup di | |
CVE-2026-33220 |
medium | 6.8 | 0.0034 | 2026-10-29 | Weblate is a web based localization tool. In versions prior to 5.17, the translation memor | |
CVE-2026-6290 |
critical | 9.1 | 0.0023 | 2026-10-29 | Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plugin which | |
CVE-2026-5758 |
medium | 6.5 | 0.0056 | 2026-10-29 | JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Ver | |
CVE-2026-33214 |
medium | 4.3 | 0.0025 | 2026-10-29 | Weblate is a web based localization tool. In versions prior to 5.17, the translation memor | |
CVE-2026-33212 |
low | 3.1 | 0.0023 | 2026-10-29 | Weblate is a web based localization tool. In versions prior to 5.17, the tasks API didn't | |
CVE-2026-30993 |
critical | 9.8 | 0.0053 | 2026-10-29 | Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerab | |
CVE-2026-6370 |
medium | 5.9 | 0.0014 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-20186 |
critical | 9.9 | 0.0570 | 2026-10-29 | A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remo | |
CVE-2026-20184 |
critical | 9.8 | 0.0053 | 2026-10-29 | A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex | |
CVE-2026-20180 |
critical | 9.9 | 0.0613 | 2026-10-29 | A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remo | |
CVE-2026-20170 |
medium | 6.1 | 0.0023 | 2026-10-29 | A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could hav | |
CVE-2026-20161 |
medium | 5.5 | 0.0013 | 2026-10-29 | A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authentic | |
CVE-2026-20152 |
medium | 5.3 | 0.0031 | 2026-10-29 | A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco | |
CVE-2026-20148 |
medium | 4.9 | 0.0665 | 2026-10-29 | A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attack | |
CVE-2026-20147 |
critical | 9.9 | 0.1056 | 2026-10-29 | A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attack | |
CVE-2026-20136 |
medium | 6.0 | 0.0051 | 2026-10-29 | A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Pass | |
CVE-2026-20132 |
medium | 4.8 | 0.0018 | 2026-10-29 | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services | |
CVE-2026-20081 |
medium | 6.5 | 0.0039 | 2026-10-29 | Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote at | |
CVE-2026-20078 |
medium | 6.5 | 0.0039 | 2026-10-29 | Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote at | |
CVE-2026-20061 |
medium | 6.5 | 0.0024 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco Unity Connection could allo | |
CVE-2026-20060 |
medium | 4.7 | 0.0021 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco Unity Connection could allo | |
CVE-2026-20059 |
medium | 6.1 | 0.0020 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco Unity Connection could allo | |
CVE-2026-5387 |
critical | 9.3 | 0.0037 | 2026-10-29 | The vulnerability, if exploited, could allow an unauthenticated miscreant to perform opera | |
CVE-2026-20205 |
high | 7.2 | 0.0029 | 2026-10-29 | In Splunk MCP Server app versions below 1.0.3 , a user who holds a role with access to the | |
CVE-2026-20204 |
high | 7.1 | 0.0315 | 2026-10-29 | In Splunk Enterprise versions below 10.2.1, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud P | |
CVE-2026-20203 |
medium | 4.3 | 0.0016 | 2026-10-29 | In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud P | |
CVE-2026-20202 |
medium | 6.6 | 0.0025 | 2026-10-29 | In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud P | |
CVE-2026-4682 |
high | 8.7 | 0.0032 | 2026-10-29 | Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by |