Browse All CVEs
10,479 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-56365 |
medium | 6.3 | 0.0028 | 2026-10-29 | ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when w | |
CVE-2026-56377 |
medium | 4.8 | 0.0016 | 2026-10-29 | ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to cr | |
CVE-2026-56777 |
medium | 5.3 | 0.0033 | 2026-10-29 | n8n before 2.25.7 and 2.26.x before 2.26.2 contains an abstract syntax tree (AST) security | |
CVE-2026-54500 |
medium | 5.3 | 0.0020 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-54502 |
medium | 6.3 | 0.0040 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-54899 |
medium | 6.3 | 0.0041 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior t | |
CVE-2026-54900 |
medium | 6.3 | 0.0052 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-54901 |
medium | 6.3 | 0.0041 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-54902 |
medium | 6.3 | 0.0050 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior t | |
CVE-2026-54903 |
medium | 6.3 | 0.0041 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-57962 |
medium | 5.3 | 0.0034 | 2026-10-29 | A malicious LDAP server, which a Thunderbird user is configured to query for address-book | |
CVE-2026-57963 |
medium | 6.5 | 0.0031 | 2026-10-29 | An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styl | |
CVE-2026-20457 |
medium | 5.3 | 0.0029 | 2026-10-29 | In Modem, there is a possible system crash due to improper input validation. This could le | |
CVE-2026-20459 |
medium | 5.3 | 0.0026 | 2026-10-29 | In Modem, there is a possible system crash due to improper input validation. This could le | |
CVE-2026-20460 |
medium | 5.3 | 0.0026 | 2026-10-29 | In Modem, there is a possible information disclosure due to improper input validation. Thi | |
CVE-2026-20461 |
medium | 5.3 | 0.0028 | 2026-10-29 | In Modem, there is a possible out of bounds write due to a missing bounds check. This coul | |
CVE-2026-20462 |
medium | 6.7 | 0.0016 | 2026-10-29 | In Telephony, there is a possible memory corruption due to a heap buffer overflow. This co | |
CVE-2026-20463 |
medium | 6.7 | 0.0016 | 2026-10-29 | In Modem, there is a possible escalation of privilege due to a permissions bypass. This co | |
CVE-2026-44040 |
medium | 6.5 | 0.0040 | 2026-10-29 | UltraVNC through 1.8.2.2 uses a cryptographically weak pseudo-random number generator to p | |
CVE-2026-44041 |
medium | 6.5 | 0.0041 | 2026-10-29 | UltraVNC through 1.8.2.2 contains an out-of-bounds read in the wide-string to multibyte co | |
CVE-2026-58518 |
medium | 6.9 | 0.0013 | 2026-10-29 | Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - Re | |
CVE-2026-58519 |
medium | 6.9 | 0.0024 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-7828 |
medium | 5.3 | 0.0135 | 2026-10-29 | UltraVNC repeater through 1.8.2.2 contains an integer overflow in the HTTP request logging | |
CVE-2026-10540 |
medium | 5.6 | 0.0011 | 2026-10-29 | The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwo | |
CVE-2026-56016 |
medium | 5.9 | 0.0051 | 2026-10-29 | CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from | |
CVE-2026-27435 |
medium | 5.3 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in WofficeIO Woffice allows Exploiting Incorrectly Con | |
CVE-2026-14258 |
medium | 6.5 | 0.0040 | 2026-10-29 | A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A sp | |
CVE-2026-53903 |
medium | 5.3 | 0.0041 | 2026-10-29 | MCO is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in the /cust | |
CVE-2026-53904 |
medium | 6.3 | 0.0034 | 2026-10-29 | MCO is vulnerable to Account Denial of Service due to improper implementation of password | |
CVE-2026-53905 |
medium | 5.3 | 0.0032 | 2026-10-29 | MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/adm | |
CVE-2026-53906 |
medium | 5.1 | 0.0052 | 2026-10-29 | MCO is vulnerable to Path Disclosure and Path Traversal in file handling functionality rel | |
CVE-2026-53907 |
medium | 4.8 | 0.0024 | 2026-10-29 | MCO is vulnerable to Stored Cross‑Site Scripting (XSS) via the application logo upload fun | |
CVE-2026-53908 |
medium | 6.9 | 0.0036 | 2026-10-29 | MCO is vulnerable to User Enumeration through authentication-related functionalities. The | |
CVE-2026-53909 |
medium | 5.3 | 0.0039 | 2026-10-29 | MCO does not correctly validate types of uploaded files. File upload validation functional | |
CVE-2026-12374 |
medium | 6.4 | 0.0007 | 2026-10-29 | Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in | |
CVE-2026-5220 |
medium | 6.4 | 0.0025 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-6283 |
medium | 5.4 | 0.0023 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-6683 |
medium | 4.6 | 0.0031 | 2026-10-29 | FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted met | |
CVE-2026-6684 |
medium | 4.6 | 0.0031 | 2026-10-29 | FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an | |
CVE-2026-6686 |
medium | 4.6 | 0.0026 | 2026-10-29 | FatFs R0.16 and earlier contains an uninitialized cluster exposure when f_lseek() extends | |
CVE-2026-58024 |
medium | 5.1 | 0.0037 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-58025 |
medium | 5.9 | 0.0050 | 2026-10-29 | Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This | |
CVE-2026-58027 |
medium | 5.3 | 0.0037 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-58029 |
medium | 5.3 | 0.0035 | 2026-10-29 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p | |
CVE-2026-58030 |
medium | 5.3 | 0.0027 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-58032 |
medium | 5.3 | 0.0030 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-58033 |
medium | 5.3 | 0.0041 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foun | |
CVE-2026-8480 |
medium | 4.3 | 0.0013 | 2026-10-29 | A vulnerability was discovered on Stormshield Network Security 4.3.0 to 4.3.41 (included) | |
CVE-2026-12480 |
medium | 5.5 | 0.0019 | 2026-10-29 | Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read du | |
CVE-2026-13211 |
medium | 4.3 | 0.0017 | 2026-10-29 | The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP au |