Browse All CVEs
10,553 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-64662 |
medium | 6.5 | 0.0042 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and | |
CVE-2026-64663 |
medium | 6.5 | 0.0040 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and | |
CVE-2026-64664 |
medium | 4.3 | 0.0034 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and | |
CVE-2026-64677 |
medium | 5.9 | 0.0102 | 2026-10-29 | Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in An | |
CVE-2026-70639 |
medium | 6.8 | 0.0019 | 2026-10-29 | llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in t | |
CVE-2026-71430 |
medium | 6.2 | 0.0016 | 2026-10-29 | node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.25.1, th | |
CVE-2026-71434 |
medium | 5.3 | 0.0041 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.3 and | |
CVE-2026-71435 |
medium | 6.1 | 0.0034 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.3 and | |
CVE-2026-71436 |
medium | 5.3 | 0.0058 | 2026-10-29 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagram | |
CVE-2026-71437 |
medium | 6.5 | 0.0050 | 2026-10-29 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagram | |
CVE-2026-71439 |
medium | 5.3 | 0.0053 | 2026-10-29 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagram | |
CVE-2026-71446 |
medium | 6.9 | 0.0040 | 2026-10-29 | AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain v | |
CVE-2026-71447 |
medium | 6.9 | 0.0040 | 2026-10-29 | AIL Project contains a stored cross-site scripting vulnerability in the translation contro | |
CVE-2026-71478 |
medium | 6.1 | 0.0036 | 2026-10-29 | league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5 | |
CVE-2026-71497 |
medium | 4.7 | 0.0030 | 2026-10-29 | jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup' | |
CVE-2026-71498 |
medium | 5.1 | 0.0017 | 2026-10-29 | node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.26.1, pa | |
CVE-2026-71554 |
medium | 5.3 | 0.0042 | 2026-10-29 | h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions up to and includin | |
CVE-2026-71555 |
medium | 4.1 | 0.0029 | 2026-10-29 | PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Fro | |
CVE-2026-7405 |
medium | 5.5 | 0.0016 | 2026-10-29 | A maliciously crafted TIF file, when parsed through certain Autodesk products during image | |
CVE-2026-17264 |
medium | 5.3 | 0.0048 | 2026-10-29 | Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an a | |
CVE-2026-45204 |
medium | 5.5 | 0.0015 | 2026-10-29 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-19196 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacted element | |
CVE-2026-12261 |
medium | 6.5 | 0.0021 | 2026-10-29 | A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-packa | |
CVE-2026-16027 |
medium | 5.4 | 0.0024 | 2026-10-29 | Server-Side request forgery (SSRF) vulnerability in Revenue Administration Türkiye's E-Sig | |
CVE-2026-49006 |
medium | 5.3 | 0.0025 | 2026-10-29 | By accessing unencrypted information in the device firmware, an attacker can obtain creden | |
CVE-2026-49008 |
medium | 6.5 | 0.0030 | 2026-10-29 | By accessing unencrypted information in the device firmware, an attacker can obtain creden | |
CVE-2026-66492 |
medium | 6.1 | 0.0056 | 2026-10-29 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 | |
CVE-2026-66493 |
medium | 6.4 | 0.0047 | 2026-10-29 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 | |
CVE-2026-12071 |
medium | 5.3 | 0.0046 | 2026-10-29 | The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-suppl | |
CVE-2026-54199 |
medium | 5.3 | 0.0044 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header injection through t | |
CVE-2026-54201 |
medium | 6.9 | 0.0057 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox does not enforce authentication or authorization | |
CVE-2026-54205 |
medium | 6.3 | 0.0049 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_cel | |
CVE-2026-54206 |
medium | 6.3 | 0.0049 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality ac | |
CVE-2026-54207 |
medium | 6.3 | 0.0049 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (“!ArcEntryMove”) a | |
CVE-2026-54214 |
medium | 5.3 | 0.0046 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injectio | |
CVE-2026-54215 |
medium | 5.3 | 0.0046 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the | |
CVE-2026-54216 |
medium | 5.3 | 0.0045 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scrip | |
CVE-2026-54217 |
medium | 5.3 | 0.0044 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnera | |
CVE-2026-66838 |
medium | 5.9 | 0.0040 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-16637 |
medium | 6.5 | 0.0046 | 2026-10-29 | OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that by | |
CVE-2026-62992 |
medium | 6.9 | 0.0053 | 2026-10-29 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS | |
CVE-2026-62996 |
medium | 6.9 | 0.0051 | 2026-10-29 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS | |
CVE-2026-17598 |
medium | 5.3 | 0.0039 | 2026-10-29 | Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user- | |
CVE-2026-17599 |
medium | 6.9 | 0.0049 | 2026-10-29 | Nexus Repository 3 contained an endpoint used to change the administrator account password | |
CVE-2026-19211 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unkno | |
CVE-2026-66062 |
medium | 5.3 | 0.0051 | 2026-10-29 | SvelteKit is a framework for rapidly developing robust, performant web applications using | |
CVE-2026-19229 |
medium | 5.5 | 0.0056 | 2026-10-29 | A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this i | |
CVE-2026-44964 |
medium | 6.5 | 0.0034 | 2026-10-29 | In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActi | |
CVE-2026-44965 |
medium | 5.5 | 0.0016 | 2026-10-29 | In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configu | |
CVE-2026-47361 |
medium | 6.4 | 0.0029 | 2026-10-29 | In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is |