Browse All CVEs
10,479 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-27409 |
medium | 5.3 | 0.0032 | 2026-10-29 | Missing Authorization vulnerability in Webba Plugins Webba Booking allows Exploiting Incor | |
CVE-2026-34096 |
medium | 4.8 | 0.0024 | 2026-10-29 | Guardian language-system fails to sanitize the name GET parameter before outputting it int | |
CVE-2026-34097 |
medium | 4.8 | 0.0024 | 2026-10-29 | Guardian language-system fails to sanitize the id GET parameter before inserting it into m | |
CVE-2026-34098 |
medium | 4.8 | 0.0024 | 2026-10-29 | Guardian language-system fails to sanitize the id GET parameter before inserting it into H | |
CVE-2026-49087 |
medium | 6.5 | 0.0047 | 2026-10-29 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a den | |
CVE-2026-49088 |
medium | 4.4 | 0.0032 | 2026-10-29 | Insertion of Sensitive Information into Log File (CWE-532) in Kibana can lead to informati | |
CVE-2026-56148 |
medium | 6.5 | 0.0047 | 2026-10-29 | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Exce | |
CVE-2026-56149 |
medium | 4.9 | 0.0050 | 2026-10-29 | Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead t | |
CVE-2026-56151 |
medium | 6.5 | 0.0047 | 2026-10-29 | Improper Input Validation (CWE-20) in Kibana can lead to a denial of service via Input Dat | |
CVE-2026-56152 |
medium | 5.3 | 0.0031 | 2026-10-29 | Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized information disclosur | |
CVE-2026-57720 |
medium | 4.3 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in Codexpert Inc ThumbPress allows Exploiting Incorrec | |
CVE-2026-57721 |
medium | 5.3 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in WP Reloaded ApplyOnline allows Exploiting Incorrect | |
CVE-2026-49090 |
medium | 6.5 | 0.0042 | 2026-10-29 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to a denial of servi | |
CVE-2026-57722 |
medium | 5.9 | 0.0024 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57737 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-58520 |
medium | 6.9 | 0.0028 | 2026-10-29 | URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundat | |
CVE-2026-58521 |
medium | 6.9 | 0.0055 | 2026-10-29 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulne | |
CVE-2026-13769 |
medium | 6.8 | 0.0017 | 2026-10-29 | Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix | |
CVE-2026-14358 |
medium | 6.9 | 0.0030 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-58517 |
medium | 6.9 | 0.0033 | 2026-10-29 | Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Med | |
CVE-2026-14363 |
medium | 6.9 | 0.0052 | 2026-10-29 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulne | |
CVE-2026-54164 |
medium | 6.5 | 0.0034 | 2026-10-29 | API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. In versio | |
CVE-2026-54908 |
medium | 6.3 | 0.0054 | 2026-10-29 | Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3 | |
CVE-2026-55688 |
medium | 4.0 | 0.0033 | 2026-10-29 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests | |
CVE-2026-14340 |
medium | 5.3 | 0.0043 | 2026-10-29 | An incorrect authorization vulnerability was identified in GitHub Enterprise Server that a | |
CVE-2026-54720 |
medium | 5.4 | 0.0026 | 2026-10-29 | Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions p | |
CVE-2026-54756 |
medium | 6.3 | 0.0046 | 2026-10-29 | Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing ca | |
CVE-2026-55886 |
medium | 6.3 | 0.0053 | 2026-10-29 | Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing ca | |
CVE-2026-54704 |
medium | 6.5 | 0.0038 | 2026-10-29 | OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrum | |
CVE-2026-55793 |
medium | 5.9 | 0.0032 | 2026-10-29 | Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22, an a | |
CVE-2026-14381 |
medium | 6.5 | 0.0026 | 2026-10-29 | Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.46 allowed a | |
CVE-2026-14384 |
medium | 6.5 | 0.0026 | 2026-10-29 | Out of bounds read in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a r | |
CVE-2026-14386 |
medium | 6.5 | 0.0028 | 2026-10-29 | Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attac | |
CVE-2026-14388 |
medium | 6.5 | 0.0028 | 2026-10-29 | Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attac | |
CVE-2026-14391 |
medium | 5.3 | 0.0023 | 2026-10-29 | Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a rem | |
CVE-2026-14396 |
medium | 6.5 | 0.0025 | 2026-10-29 | Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attac | |
CVE-2026-14399 |
medium | 6.5 | 0.0035 | 2026-10-29 | Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacke | |
CVE-2026-14402 |
medium | 6.5 | 0.0022 | 2026-10-29 | Uninitialized Use in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a re | |
CVE-2026-14404 |
medium | 6.5 | 0.0027 | 2026-10-29 | Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a r | |
CVE-2026-14406 |
medium | 5.9 | 0.0024 | 2026-10-29 | Out of bounds read in V8 in Google Chrome prior to 150.0.7871.46 allowed an attacker who c | |
CVE-2026-14408 |
medium | 6.5 | 0.0035 | 2026-10-29 | Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacke | |
CVE-2026-14410 |
medium | 4.3 | 0.0020 | 2026-10-29 | Inappropriate implementation in Skia in Google Chrome prior to 150.0.7871.46 allowed a rem | |
CVE-2026-14414 |
medium | 5.3 | 0.0025 | 2026-10-29 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 | |
CVE-2026-14418 |
medium | 4.3 | 0.0020 | 2026-10-29 | Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attack | |
CVE-2026-14421 |
medium | 6.5 | 0.0035 | 2026-10-29 | Uninitialized Use in Dawn in Google Chrome on ChromeOS prior to 150.0.7871.46 allowed a re | |
CVE-2026-50283 |
medium | 5.3 | 0.0036 | 2026-10-29 | Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0 | |
CVE-2026-50280 |
medium | 6.0 | 0.0040 | 2026-10-29 | Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 and above prior to 5 | |
CVE-2026-55791 |
medium | 6.9 | 0.0046 | 2026-10-29 | Craft CMS is a content management system (CMS). Versions 4.0.0-RC1 and above, prior to 4.1 | |
CVE-2026-55792 |
medium | 6.0 | 0.0033 | 2026-10-29 | Craft CMS is a content management system (CMS). In versions starting from 4.0.0-RC1 and pr | |
CVE-2026-11592 |
medium | 4.3 | 0.0049 | 2026-10-29 | The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plu |