Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-34559 |
critical | 9.0 | 0.0033 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-5312 |
medium | 5.5 | 0.0055 | 2026-10-29 | A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, D | |
CVE-2026-4820 |
medium | 4.3 | 0.0012 | 2026-10-29 | IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on | |
CVE-2026-4364 |
medium | 5.4 | 0.0009 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-4101 |
critical | 9.8 | 0.0037 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-34545 |
high | 8.4 | 0.0063 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34544 |
high | 8.4 | 0.0025 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34543 |
high | 8.7 | 0.0050 | 2026-10-29 | OpenEXR provides the specification and reference implementation of the EXR file format, an | |
CVE-2026-34531 |
high | 8.2 | 0.0034 | 2026-10-29 | Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prio | |
CVE-2026-34525 |
medium | 6.3 | 0.0030 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34520 |
low | 2.7 | 0.0048 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34519 |
low | 2.7 | 0.0030 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34518 |
low | 2.7 | 0.0035 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34517 |
low | 2.7 | 0.0040 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34516 |
medium | 6.6 | 0.0046 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34515 |
medium | 6.6 | 0.0045 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34514 |
low | 2.7 | 0.0033 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-34513 |
low | 2.7 | 0.0046 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-2862 |
medium | 5.3 | 0.0039 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-2475 |
medium | 4.7 | 0.0026 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-22815 |
medium | 6.9 | 0.0046 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to v | |
CVE-2026-1491 |
medium | 5.3 | 0.0039 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-1345 |
high | 7.3 | 0.0036 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-5311 |
medium | 5.5 | 0.0103 | 2026-10-29 | A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-32 | |
CVE-2026-34750 |
medium | 6.5 | 0.0036 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34749 |
medium | 5.4 | 0.0013 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34748 |
high | 8.7 | 0.0029 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34747 |
high | 8.2 | 0.0032 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34746 |
high | 7.7 | 0.0031 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34456 |
critical | 9.8 | 0.0046 | 2026-10-29 | Reviactyl is an open-source game server management panel built using Laravel, React, Filam | |
CVE-2026-34455 |
high | 8.7 | 0.0036 | 2026-10-29 | Hi.Events is an open-source event management and ticket selling platform. From version 0.8 | |
CVE-2026-35000 |
high | 7.1 | 0.0029 | 2026-10-29 | ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in t | |
CVE-2026-34751 |
critical | 9.1 | 0.0031 | 2026-10-29 | Payload is a free and open source headless content management system. Prior to version 3.7 | |
CVE-2026-34376 |
high | 7.5 | 0.0038 | 2026-10-29 | PdfDing is a selfhosted PDF manager, viewer and editor offering a seamless user experience | |
CVE-2026-34236 |
critical | 9.8 | 0.0022 | 2026-10-29 | Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. From version 8.0.0 to | |
CVE-2026-34159 |
critical | 9.8 | 0.0162 | 2026-10-29 | llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC | |
CVE-2026-34076 |
high | 7.4 | 0.0032 | 2026-10-29 | Clerk JavaScript is the official JavaScript repository for Clerk authentication. In @clerk | |
CVE-2026-34072 |
critical | 9.8 | 0.0046 | 2026-10-29 | Cr*nMaster (cronmaster) is a Cronjob management UI with human readable syntax, live loggin | |
CVE-2026-5310 |
low | 1.1 | 0.0010 | 2026-10-29 | A vulnerability was identified in Enter Software Iperius Backup up to 8.7.2. This impacts | |
CVE-2026-33990 |
medium | 6.8 | 0.0026 | 2026-10-29 | Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Dock | |
CVE-2026-33978 |
medium | 6.1 | 0.0029 | 2026-10-29 | Notesnook is a note-taking app focused on user privacy & ease of use. Prior to version 3.3 | |
CVE-2026-20174 |
medium | 4.9 | 0.0050 | 2026-10-29 | A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could all | |
CVE-2026-20160 |
critical | 9.8 | 0.0093 | 2026-10-29 | A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unaut | |
CVE-2026-20155 |
high | 8.0 | 0.0027 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Networ | |
CVE-2026-20151 |
high | 7.3 | 0.0027 | 2026-10-29 | A vulnerability in the web interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) | |
CVE-2026-20097 |
medium | 6.5 | 0.0041 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20096 |
medium | 6.5 | 0.0073 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20095 |
medium | 6.5 | 0.0095 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20094 |
high | 8.8 | 0.0114 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20093 |
critical | 9.8 | 0.0101 | 2026-10-29 | A vulnerability in the change password functionality of Cisco Integrated Management Contro |