Filter and search through 392,393 vulnerabilities
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE-2026-22812 | *Previously reported via email to [email protected] on 2025-11-17 per the security policy in [opencode-sdk-js/SECURITY.md](https://github.com/sst/openco... | 8.8 | 775 | Rising | Yes |
| Yes |
| CVE-2026-22809 | ## Summary A potential Regular Expression Denial of Service (ReDoS) vulnerability was identified in tarteaucitron.js in the handling of the `issuu_id... | 4.4 | 90 | Neutral | No | Yes |
| CVE-2026-22808 | ### Summary A cross-site scripting (XSS) vulnerability in Fleet’s Windows MDM authentication flow could allow an attacker to compromise a Fleet user ... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-22807 | # Summary vLLM loads Hugging Face `auto_map` dynamic modules during model resolution **without gating on `trust_remote_code`**, allowing attacker-con... | 8.8 | 708 | Neutral | No | Yes |
| CVE-2026-22805 | Metabase is an open-source data analytics platform. Prior to 55.13, 56.3, and 57.1, self-hosted Metabase instances that allow users to create subscrip... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-22804 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 to 1.9.0, Stored Cross-Site S... | 4.7 | 213 | Neutral | Yes | No |
| CVE-2026-22803 | ## Summary The experimental `form` remote function uses a binary data format containing a representation of submitted form data. A specially-crafted ... | 7.5 | 386 | Neutral | No | Yes |
| CVE-2026-22801 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.2... | 7.8 | 431 | Neutral | No | Yes |
| CVE-2026-22800 | PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Request Forgery (CSRF) vulnerabilit... | 4.5 | 84 | Neutral | No | Yes |
| CVE-2026-22799 | Emlog is an open source website building system. emlog v2.6.1 and earlier exposes a REST API endpoint (/index.php?rest-api=upload) for media file uplo... | 8.8 | 545 | Neutral | No | Yes |
| CVE-2026-22798 | Thanks, @thunze for reporting this! `hermes` subcommands take arbitrary options under the `-O` argument. These have been logged in raw form since htt... | 5.9 | 143 | Neutral | No | Yes |
| CVE-2026-22797 | An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 1... | 9.9 | 585 | Neutral | No | Yes |
| CVE-2026-22796 | Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed w... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-22795 | Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An applicatio... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-22794 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.93, the server uses the Origin value from the request headers... | 8.8 | 646 | Neutral | Yes | Yes |
| CVE-2026-22793 | 5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe option parsin... | 9.6 | 586 | Neutral | No | No |
| CVE-2026-22792 | 5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML renderin... | 9.6 | 586 | Neutral | No | No |
| CVE-2026-22791 | openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer overflow vulnerability in the CKM_ECDH_AES... | 6.6 | 223 | Neutral | No | Yes |
| CVE-2026-22789 | WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Prior to 1.19, WebErpMesv2 contains a file upload validation... | 8.8 | 545 | Neutral | No | Yes |
| CVE-2026-22788 | WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Prior to 1.19, the WebErpMesV2 application exposes multiple ... | 8.2 | 495 | Neutral | No | Yes |