Browse All CVEs
10,475 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-4322 |
medium | 6.1 | 0.0025 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-26355 |
medium | 6.5 | 0.0177 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-41123 |
medium | 4.3 | 0.0025 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1 | |
CVE-2026-41124 |
medium | 4.4 | 0.0017 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1 | |
CVE-2026-44268 |
medium | 4.4 | 0.0015 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1 | |
CVE-2026-44269 |
medium | 4.4 | 0.0017 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1 | |
CVE-2026-46467 |
medium | 5.8 | 0.0011 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-46468 |
medium | 4.4 | 0.0017 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-46730 |
medium | 4.2 | 0.0017 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-54483 |
medium | 6.7 | 0.0062 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1 | |
CVE-2026-59234 |
medium | 6.9 | 0.0064 | 2026-10-29 | Authorization Bypass Through User-Controlled Key (CWE-639) in CalendarDeleteEventControlle | |
CVE-2026-46463 |
medium | 6.5 | 0.0033 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-46464 |
medium | 4.9 | 0.0062 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-46465 |
medium | 5.5 | 0.0041 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-49813 |
medium | 6.7 | 0.0062 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-14611 |
medium | 5.3 | 0.0043 | 2026-10-29 | A vulnerability has been found in DeepMyst Mysti up to 0.4.0. The affected element is the | |
CVE-2026-20909 |
medium | 5.3 | 0.0039 | 2026-10-29 | Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time | |
CVE-2026-25714 |
medium | 4.3 | 0.0039 | 2026-10-29 | Gitea versions up to and including 1.26.1 do not apply public-only token filtering consist | |
CVE-2026-25779 |
medium | 6.1 | 0.0030 | 2026-10-29 | Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-e | |
CVE-2026-25782 |
medium | 5.3 | 0.0039 | 2026-10-29 | Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the l | |
CVE-2026-27761 |
medium | 4.3 | 0.0045 | 2026-10-29 | Gitea versions up to and including 1.26.2 allow repository RSS and Atom feed endpoints to | |
CVE-2026-27783 |
medium | 4.3 | 0.0035 | 2026-10-29 | Gitea versions up to and including 1.26.1 do not enforce repository-unit authorization on | |
CVE-2026-28705 |
medium | 5.3 | 0.0045 | 2026-10-29 | Gitea versions before 1.25.5 use release tag names and asset names as filesystem path comp | |
CVE-2026-45488 |
medium | 5.4 | 0.0036 | 2026-10-29 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium- | |
CVE-2026-45489 |
medium | 6.5 | 0.0088 | 2026-10-29 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | |
CVE-2026-55945 |
medium | 4.2 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-56646 |
medium | 6.5 | 0.0092 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-bas | |
CVE-2026-57987 |
medium | 6.5 | 0.0087 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthoriz | |
CVE-2026-58278 |
medium | 5.4 | 0.0040 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthoriz | |
CVE-2026-58291 |
medium | 6.1 | 0.0099 | 2026-10-29 | Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) all | |
CVE-2026-58300 |
medium | 6.2 | 0.0045 | 2026-10-29 | Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to d | |
CVE-2026-58418 |
medium | 6.5 | 0.0031 | 2026-10-29 | SSRF via HTTP Redirect in Repository Migration | |
CVE-2026-58522 |
medium | 6.8 | 0.0043 | 2026-10-29 | Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to d | |
CVE-2026-58524 |
medium | 5.4 | 0.0041 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-58597 |
medium | 4.3 | 0.0070 | 2026-10-29 | Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows | |
CVE-2026-58523 |
medium | 6.5 | 0.0088 | 2026-10-29 | Improper access control in Microsoft Edge for Android allows an unauthorized attacker to b | |
CVE-2026-14622 |
medium | 5.5 | 0.0069 | 2026-10-29 | A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b61244 | |
CVE-2026-14628 |
medium | 5.5 | 0.0077 | 2026-10-29 | A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16. This impacts th | |
CVE-2026-14635 |
medium | 5.5 | 0.0062 | 2026-10-29 | A security flaw has been discovered in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 2 | |
CVE-2026-14636 |
medium | 5.3 | 0.0038 | 2026-10-29 | A weakness has been identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 23105f | |
CVE-2026-14640 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected i | |
CVE-2026-14641 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Af | |
CVE-2026-14642 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Af | |
CVE-2026-14648 |
medium | 5.5 | 0.0056 | 2026-10-29 | A security vulnerability has been detected in code-projects Online Voting System up to 0.x | |
CVE-2026-14649 |
medium | 6.9 | 0.0032 | 2026-10-29 | A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the fu | |
CVE-2026-14652 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This | |
CVE-2026-14653 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. | |
CVE-2026-14654 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. | |
CVE-2026-14660 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is | |
CVE-2026-14687 |
medium | 5.5 | 0.0053 | 2026-10-29 | A vulnerability was determined in 666ghj BettaFish up to 1.2.1. Impacted is the function _ |