Browse All CVEs
38,758 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-120311 |
high | 8.7 | 0.0045 | 2026-11-02 | Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobSto | |
CVE-2026-120312 |
high | 8.7 | 0.0045 | 2026-11-02 | Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR t | |
CVE-2026-120309 |
medium | 6.3 | 0.0023 | 2026-11-02 | Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vulnerability in getRout | |
CVE-2026-120310 |
low | 2.3 | 0.0021 | 2026-11-02 | Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 returns stored field values in | |
CVE-2026-120323 |
medium | 5.3 | 0.0037 | 2026-11-02 | A security flaw has been discovered in samanhappy MCPHub up to 1.0.45/1.1.7. Impacted is a | |
CVE-2025-46397 |
high | 7.8 | 0.0031 | 2026-11-02 | A flaw was found in xfig. This vulnerability allows possible code execution via local inpu | |
CVE-2026-3234 |
medium | 4.3 | 0.0033 | 2026-11-02 | A flaw was found in mod_proxy_cluster. This vulnerability, a Carriage Return Line Feed (C | |
CVE-2026-120320 |
low | 2.0 | 0.0039 | 2026-11-02 | A vulnerability was determined in jxxghp MoviePilot up to 3.1.2. This vulnerability affect | |
CVE-2026-120322 |
high | 8.6 | 0.0062 | 2026-11-02 | A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some u | |
CVE-2026-120319 |
medium | 5.3 | 0.0027 | 2026-11-02 | A vulnerability was found in Sanluan PublicCMS 4.x/5.x/6.x. This affects the function Trad | |
CVE-2026-120283 |
critical | 9.3 | 0.0058 | 2026-11-02 | A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function st | |
CVE-2026-120282 |
high | 8.6 | 0.0165 | 2026-11-02 | A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function ho | |
CVE-2026-120281 |
critical | 9.3 | 0.0058 | 2026-11-02 | A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy | |
CVE-2026-120280 |
critical | 10.0 | 0.0199 | 2026-11-02 | A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the | |
CVE-2026-120279 |
critical | 9.3 | 0.0199 | 2026-11-02 | A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown fu | |
CVE-2026-120277 |
critical | 9.3 | 0.0245 | 2026-11-02 | A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue | |
CVE-2026-120278 |
medium | 5.5 | 0.0039 | 2026-11-02 | A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the function | |
CVE-2026-120276 |
critical | 9.3 | 0.0321 | 2026-11-01 | A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability aff | |
CVE-2026-120275 |
medium | 5.1 | 0.0079 | 2026-11-01 | A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8 | |
CVE-2026-95863 |
high | 7.6 | 0.0033 | 2026-11-01 | Improper neutralization of input during web page generation in Apache Wicket. Apache Wick | |
CVE-2026-111089 |
high | 7.6 | 0.0033 | 2026-11-01 | Apache Wicket reads texts from the application's resource bundles — a localized label, a c | |
CVE-2026-87718 |
low | 2.3 | 0.0029 | 2026-11-01 | Apache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the Content-Security-Policy headers o | |
CVE-2026-83559 |
high | 7.4 | 0.0029 | 2026-11-01 | Improper encoding or escaping of output in Apache Wicket. org.apache.wicket.core.util.str | |
CVE-2026-82956 |
high | 7.6 | 0.0031 | 2026-11-01 | Improper neutralization of input during web page generation in Apache Wicket. org.apache. | |
CVE-2026-83539 |
high | 7.4 | 0.0031 | 2026-11-01 | Improper neutralization of input during web page generation in Apache Wicket. org.apache. | |
CVE-2026-84231 |
high | 7.4 | 0.0033 | 2026-11-01 | Improper neutralization of input during web page generation in Apache Wicket. org.apache. | |
CVE-2026-84172 |
medium | 6.3 | 0.0027 | 2026-11-01 | Files accessible to external parties in Apache Wicket. org.apache.wicket.markup.html.Pack | |
CVE-2026-84177 |
medium | 6.3 | 0.0029 | 2026-11-01 | Incorrect behavior order in Apache Wicket: a file path is validated before the framework a | |
CVE-2026-83594 |
high | 8.3 | 0.0029 | 2026-11-01 | Memory allocation with an excessive size value in Apache Wicket. org.apache.wicket.markup | |
CVE-2026-84170 |
high | 8.3 | 0.0034 | 2026-11-01 | Allocation of resources without limits or throttling in Apache Wicket. org.apache.wicket. | |
CVE-2026-82559 |
low | 2.3 | 0.0029 | 2026-11-01 | Insufficient session expiration in Apache Wicket. org.apache.wicket.protocol.ws.WebSocket | |
CVE-2026-82704 |
medium | 6.9 | 0.0025 | 2026-11-01 | Missing authorization in Apache Wicket. org.apache.wicket.core.request.handler.ListenerRe | |
CVE-2026-82705 |
medium | 6.3 | 0.0034 | 2026-11-01 | Missing authorization in Apache Wicket. org.apache.wicket.authorization.IAuthorizationStr | |
CVE-2026-82840 |
high | 7.2 | 0.0030 | 2026-11-01 | Session fixation in Apache Wicket. org.apache.wicket.authroles.authentication.Authenticat | |
CVE-2026-82898 |
low | 2.1 | 0.0032 | 2026-11-01 | Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.Reso | |
CVE-2026-82115 |
medium | 6.3 | 0.0034 | 2026-11-01 | Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketMessag | |
CVE-2026-82557 |
medium | 6.9 | 0.0029 | 2026-11-01 | Missing authorization in Apache Wicket. org.apache.wicket.markup.html.form.Form resolves | |
CVE-2026-82558 |
low | 2.3 | 0.0029 | 2026-11-01 | Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketBehavi | |
CVE-2026-120274 |
medium | 5.1 | 0.0025 | 2026-11-01 | A vulnerability was identified in beecue FastBee up to 2.1.0. Affected by this issue is so | |
CVE-2026-120242 |
low | 1.9 | 0.0020 | 2026-11-01 | A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES2 | |
CVE-2026-120241 |
high | 7.7 | 0.0062 | 2026-11-01 | A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC- | |
CVE-2026-120240 |
high | 8.6 | 0.0169 | 2026-11-01 | A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the | |
CVE-2026-120239 |
high | 8.6 | 0.0169 | 2026-11-01 | A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects t | |
CVE-2026-120237 |
low | 2.1 | 0.0041 | 2026-11-01 | A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the | |
CVE-2026-120238 |
high | 8.6 | 0.0169 | 2026-11-01 | A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the functio | |
CVE-2026-74760 |
— | — | 0.0012 | 2026-11-01 | Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from an | |
CVE-2026-120236 |
low | 2.1 | 0.0027 | 2026-11-01 | A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulner | |
CVE-2026-74759 |
— | — | 0.0018 | 2026-11-01 | Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated cred | |
CVE-2026-119480 |
medium | 6.5 | 0.0040 | 2026-11-01 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-120235 |
low | 2.1 | 0.0035 | 2026-11-01 | A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. Affected |