Browse All CVEs
49,628 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-33884 |
medium | 4.3 | 0.0017 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5 | |
CVE-2026-33885 |
medium | 6.1 | 0.0018 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5 | |
CVE-2026-33886 |
medium | 6.5 | 0.0023 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Starting in version | |
CVE-2026-33887 |
medium | 5.4 | 0.0015 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5 | |
CVE-2026-33891 |
— | — | 0.0061 | 2026-10-29 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in | |
CVE-2026-33894 |
— | — | 0.0048 | 2026-10-29 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in | |
CVE-2026-33895 |
— | — | 0.0053 | 2026-10-29 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in | |
CVE-2026-33896 |
critical | 9.1 | 0.0036 | 2026-10-29 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in | |
CVE-2026-33903 |
medium | 6.5 | 0.0022 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when p | |
CVE-2026-33904 |
medium | 6.5 | 0.0017 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, a deadlock i | |
CVE-2026-33906 |
high | 7.2 | 0.0040 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, the NetworkM | |
CVE-2026-33907 |
medium | 6.5 | 0.0025 | 2026-10-29 | Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when p | |
CVE-2026-33916 |
medium | 4.7 | 0.0028 | 2026-10-29 | Handlebars provides the power necessary to let users build semantic templates. In versions | |
CVE-2026-33937 |
— | — | 0.0191 | 2026-10-29 | Handlebars provides the power necessary to let users build semantic templates. In versions | |
CVE-2026-33938 |
— | — | 0.0072 | 2026-10-29 | Handlebars provides the power necessary to let users build semantic templates. In versions | |
CVE-2026-34046 |
high | 8.7 | 0.0048 | 2026-10-29 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to ve | |
CVE-2026-4976 |
high | 7.4 | 0.0067 | 2026-10-29 | A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affe | |
CVE-2026-27309 |
high | 7.8 | 0.0022 | 2026-10-29 | Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerabi | |
CVE-2026-33939 |
— | — | 0.0063 | 2026-10-29 | Handlebars provides the power necessary to let users build semantic templates. In versions | |
CVE-2026-33940 |
— | — | 0.0072 | 2026-10-29 | Handlebars provides the power necessary to let users build semantic templates. In versions | |
CVE-2026-33941 |
high | 8.2 | 0.0030 | 2026-10-29 | Handlebars provides the power necessary to let users build semantic templates. In versions | |
CVE-2026-33943 |
critical | 9.8 | 0.0065 | 2026-10-29 | Happy DOM is a JavaScript implementation of a web browser without its graphical user inter | |
CVE-2026-33946 |
high | 8.2 | 0.0047 | 2026-10-29 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prio | |
CVE-2026-33953 |
high | 8.5 | 0.0028 | 2026-10-29 | LinkAce is a self-hosted archive to collect website links. Versions prior to 2.5.3 block d | |
CVE-2026-33954 |
medium | 6.5 | 0.0032 | 2026-10-29 | LinkAce is a self-hosted archive to collect website links. In versions prior to 2.5.3, a p | |
CVE-2026-33955 |
high | 8.6 | 0.0035 | 2026-10-29 | Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop, a cross-site scrip | |
CVE-2026-33976 |
critical | 9.6 | 0.0072 | 2026-10-29 | Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop and 3.3.17 on Andro | |
CVE-2026-33980 |
high | 8.1 | 0.0040 | 2026-10-29 | Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI as | |
CVE-2026-33981 |
high | 8.3 | 0.0048 | 2026-10-29 | changedetection.io is a free open source web page change detection tool. Prior to 0.54.7, | |
CVE-2026-33989 |
medium | 6.5 | 0.0050 | 2026-10-29 | Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.4 | |
CVE-2026-34226 |
— | — | 0.0047 | 2026-10-29 | Happy DOM is a JavaScript implementation of a web browser without its graphical user inter | |
CVE-2026-4985 |
medium | 5.3 | 0.0050 | 2026-10-29 | A vulnerability was identified in dloebl CGIF up to 0.5.2. This vulnerability affects the | |
CVE-2026-33936 |
medium | 5.3 | 0.0049 | 2026-10-29 | The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptograp | |
CVE-2026-33991 |
high | 8.8 | 0.0040 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file `html | |
CVE-2026-33993 |
medium | 6.9 | 0.0059 | 2026-10-29 | Locutus brings stdlibs of other programming languages to JavaScript for educational purpos | |
CVE-2026-33994 |
medium | 6.3 | 0.0057 | 2026-10-29 | Locutus brings stdlibs of other programming languages to JavaScript for educational purpos | |
CVE-2026-5147 |
medium | 6.9 | 0.0035 | 2026-10-29 | A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This affects an u | |
CVE-2026-5254 |
low | 2.0 | 0.0025 | 2026-10-29 | A security vulnerability has been detected in welovemedia FFmate up to 2.0.15. Affected by | |
CVE-2026-5272 |
high | 8.8 | 0.0056 | 2026-10-29 | Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote atta | |
CVE-2026-5273 |
medium | 6.3 | 0.0036 | 2026-10-29 | Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker t | |
CVE-2026-5274 |
high | 8.8 | 0.0043 | 2026-10-29 | Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote attac | |
CVE-2026-5275 |
high | 8.8 | 0.0045 | 2026-10-29 | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a re | |
CVE-2026-5276 |
medium | 6.5 | 0.0025 | 2026-10-29 | Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed | |
CVE-2026-5277 |
high | 7.5 | 0.0033 | 2026-10-29 | Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a re | |
CVE-2026-5278 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a r | |
CVE-2026-5279 |
high | 8.8 | 0.0043 | 2026-10-29 | Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker | |
CVE-2026-5280 |
high | 8.8 | 0.0039 | 2026-10-29 | Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote atta | |
CVE-2026-5282 |
high | 8.1 | 0.0025 | 2026-10-29 | Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote | |
CVE-2026-5283 |
medium | 6.5 | 0.0027 | 2026-10-29 | Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a r | |
CVE-2026-5284 |
high | 7.5 | 0.0035 | 2026-10-29 | Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker |