Browse All CVEs
10,517 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-15086 |
medium | 5.9 | 0.0033 | 2026-10-29 | vulnerability in Drupal Raw Formatter [Meta Tag Formatter] allows . This issue affects Raw | |
CVE-2026-15087 |
medium | 5.9 | 0.0031 | 2026-10-29 | vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions: | |
CVE-2026-6801 |
medium | 5.3 | 0.0036 | 2026-10-29 | The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in al | |
CVE-2026-56240 |
medium | 5.3 | 0.0023 | 2026-10-29 | Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_v | |
CVE-2026-56296 |
medium | 6.9 | 0.0031 | 2026-10-29 | Cap-go before 12.128.2 contains an information disclosure vulnerability in the public.tran | |
CVE-2026-56372 |
medium | 4.8 | 0.0033 | 2026-10-29 | ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify o | |
CVE-2026-56763 |
medium | 6.3 | 0.0027 | 2026-10-29 | Hono before 4.12.7 allows __proto__ key in parseBody with dot option enabled, permitting s | |
CVE-2026-60088 |
medium | 6.8 | 0.0022 | 2026-10-29 | PraisonAI before 4.6.78 fails to validate file path references in custom command templates | |
CVE-2026-61428 |
medium | 6.9 | 0.0031 | 2026-10-29 | PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, al | |
CVE-2026-10660 |
medium | 6.4 | 0.0025 | 2026-10-29 | The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bap_broadcast_ | |
CVE-2026-15479 |
medium | 5.5 | 0.0047 | 2026-10-29 | A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the func | |
CVE-2026-15482 |
medium | 5.5 | 0.0041 | 2026-10-29 | A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects some unkn | |
CVE-2026-15485 |
medium | 5.3 | 0.0177 | 2026-10-29 | A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function | |
CVE-2026-15486 |
medium | 5.3 | 0.0177 | 2026-10-29 | A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function s | |
CVE-2026-15487 |
medium | 5.3 | 0.0177 | 2026-10-29 | A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41 | |
CVE-2026-15488 |
medium | 5.5 | 0.0050 | 2026-10-29 | A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the functi | |
CVE-2026-15489 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability was identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e | |
CVE-2026-15490 |
medium | 5.5 | 0.0041 | 2026-10-29 | A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135 | |
CVE-2026-15491 |
medium | 6.9 | 0.0065 | 2026-10-29 | A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e | |
CVE-2026-15493 |
medium | 5.1 | 0.0033 | 2026-10-29 | A vulnerability was detected in Akpali9 Attendance-Management-System up to 70b91fe38f4195b | |
CVE-2026-15497 |
medium | 5.5 | 0.0067 | 2026-10-29 | A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an u | |
CVE-2026-15498 |
medium | 6.9 | 0.0041 | 2026-10-29 | A vulnerability was identified in sergomanov SmartHomeAdatum up to cf495353d81b680675eb8d9 | |
CVE-2026-56252 |
medium | 5.3 | 0.0021 | 2026-10-29 | Capgo before 12.128.2 contains a scope isolation vulnerability in the POST /webhooks/test | |
CVE-2026-15502 |
medium | 5.3 | 0.0032 | 2026-10-29 | A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardP | |
CVE-2026-10663 |
medium | 6.1 | 0.0024 | 2026-10-29 | In Zephyr's experimental USB host stack (CONFIG_USB_HOST_STACK), usbh_device_disconnect() | |
CVE-2026-10664 |
medium | 5.0 | 0.0022 | 2026-10-29 | The nRF70 Wi-Fi driver's power-save event handler nrf_wifi_event_proc_get_power_save_info( | |
CVE-2026-10668 |
medium | 4.6 | 0.0023 | 2026-10-29 | The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) ar | |
CVE-2026-15514 |
medium | 5.5 | 0.0041 | 2026-10-29 | A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerabi | |
CVE-2026-15515 |
medium | 6.4 | 0.0016 | 2026-10-29 | A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issu | |
CVE-2026-15517 |
medium | 5.5 | 0.0041 | 2026-10-29 | A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the | |
CVE-2026-15551 |
medium | 5.5 | 0.0011 | 2026-10-29 | Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflo | |
CVE-2026-15529 |
medium | 5.3 | 0.0044 | 2026-10-29 | A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.u | |
CVE-2026-15552 |
medium | 5.3 | 0.0034 | 2026-10-29 | Enterprise Cloud Database developed by Ragic has a Stored Cross-Site Scripting vulnerabili | |
CVE-2026-15553 |
medium | 6.9 | 0.0041 | 2026-10-29 | Enterprise Cloud Database developed by Ragic has a Arbitrary File Upload vulnerability, al | |
CVE-2026-15537 |
medium | 5.5 | 0.0043 | 2026-10-29 | A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This v | |
CVE-2026-15538 |
medium | 5.3 | 0.0054 | 2026-10-29 | A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects t | |
CVE-2026-15541 |
medium | 6.9 | 0.0054 | 2026-10-29 | A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted element is the functi | |
CVE-2026-15542 |
medium | 6.9 | 0.0070 | 2026-10-29 | A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown f | |
CVE-2026-14846 |
medium | 4.5 | 0.0043 | 2026-10-29 | In version 8.2.1 of PrestaShop, there is a vulnerability relating to the incorrect sanitis | |
CVE-2026-15557 |
medium | 5.5 | 0.0069 | 2026-10-29 | A weakness has been identified in waooAI waoowaoo up to 0.4.1. Affected by this vulnerabil | |
CVE-2026-49876 |
medium | 6.5 | 0.0049 | 2026-10-29 | Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal ne | |
CVE-2026-57364 |
medium | 6.5 | 0.0035 | 2026-10-29 | Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Pay | |
CVE-2026-57365 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57375 |
medium | 6.5 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in FluxBuilder MStore API mstore-api allows Exploiting | |
CVE-2026-57377 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in WPXPO WowAddons product-addons allows Exploiting In | |
CVE-2026-57390 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in EDGARROJAS Extra Product Options Builder for WooCom | |
CVE-2026-57391 |
medium | 6.5 | 0.0024 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57392 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrec | |
CVE-2026-57393 |
medium | 6.5 | 0.0037 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-57395 |
medium | 6.5 | 0.0034 | 2026-10-29 | Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrec |