Browse All CVEs
10,437 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42752 |
medium | 6.5 | 0.0022 | 2026-10-29 | Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions. | |
CVE-2026-48518 |
medium | 4.3 | 0.0020 | 2026-10-29 | MultiJuicer is used to run separate Juice Shop instances on a central kubernetes cluster w | |
CVE-2026-48870 |
medium | 6.5 | 0.0021 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.62 versions. | |
CVE-2026-48878 |
medium | 6.5 | 0.0034 | 2026-10-29 | Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions. | |
CVE-2026-48880 |
medium | 6.5 | 0.0021 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in WP Job Portal <= 2.5.2 versions. | |
CVE-2026-48887 |
medium | 6.5 | 0.0024 | 2026-10-29 | Unauthenticated Broken Access Control in JS Help Desk <= 3.0.9 versions. | |
CVE-2026-48965 |
medium | 6.5 | 0.0033 | 2026-10-29 | Subscriber Sensitive Data Exposure in XCloner <= 4.8.6 versions. | |
CVE-2026-49043 |
medium | 4.7 | 0.0015 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Migrate Lite <= 2.7.8 versions. | |
CVE-2026-49773 |
medium | 6.5 | 0.0017 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions | |
CVE-2026-49775 |
medium | 6.5 | 0.0019 | 2026-10-29 | Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions. | |
CVE-2026-48157 |
medium | 6.1 | 0.0017 | 2026-10-29 | Slim is a PHP micro framework that enables users to write simple web applications and APIs | |
CVE-2026-12162 |
medium | 5.5 | 0.0015 | 2026-10-29 | Improper host validation in the social login autofill feature in Devolutions Remote Deskt | |
CVE-2026-10635 |
medium | 6.3 | 0.0016 | 2026-10-29 | On Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, the page-table code (arch/x | |
CVE-2026-50255 |
medium | 5.4 | 0.0009 | 2026-10-29 | Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5. | |
CVE-2026-40809 |
medium | 6.5 | 0.0020 | 2026-10-29 | Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorr | |
CVE-2026-54190 |
medium | 6.5 | 0.0026 | 2026-10-29 | Unauthenticated Broken Access Control in Envira Photo Gallery <= 1.12.5 versions. | |
CVE-2026-54197 |
medium | 6.5 | 0.0027 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in GetGenie <= 4.4.1 versions. | |
CVE-2026-8484 |
medium | 4.8 | 0.0014 | 2026-10-29 | A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a la | |
CVE-2026-12300 |
medium | 5.3 | 0.0025 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 an | |
CVE-2026-12301 |
medium | 5.3 | 0.0025 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 an | |
CVE-2026-12302 |
medium | 6.5 | 0.0025 | 2026-10-29 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox | |
CVE-2026-12303 |
medium | 4.3 | 0.0022 | 2026-10-29 | Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU compon | |
CVE-2026-12306 |
medium | 5.3 | 0.0026 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12307 |
medium | 5.3 | 0.0026 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12308 |
medium | 5.3 | 0.0026 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12309 |
medium | 6.5 | 0.0024 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12311 |
medium | 4.7 | 0.0019 | 2026-10-29 | Information disclosure, sandbox escape in the Security: Process Sandboxing component. This | |
CVE-2026-12313 |
medium | 4.7 | 0.0018 | 2026-10-29 | Information disclosure, sandbox escape in the Security: Process Sandboxing component. This | |
CVE-2026-12319 |
medium | 6.5 | 0.0021 | 2026-10-29 | Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in | |
CVE-2026-12320 |
medium | 4.3 | 0.0018 | 2026-10-29 | Information disclosure in the Password Manager component. This vulnerability was fixed in | |
CVE-2026-12321 |
medium | 5.4 | 0.0016 | 2026-10-29 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed | |
CVE-2026-12322 |
medium | 5.4 | 0.0021 | 2026-10-29 | Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 1 | |
CVE-2026-12323 |
medium | 5.4 | 0.0017 | 2026-10-29 | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox | |
CVE-2026-12325 |
medium | 6.5 | 0.0023 | 2026-10-29 | Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Fir | |
CVE-2026-12330 |
medium | 5.4 | 0.0016 | 2026-10-29 | Incorrect boundary conditions in the Internationalization component. This vulnerability wa | |
CVE-2026-53899 |
medium | 6.5 | 0.0010 | 2026-10-29 | Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allow | |
CVE-2026-53900 |
medium | 4.3 | 0.0010 | 2026-10-29 | Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP | |
CVE-2026-9507 |
medium | 5.1 | 0.0040 | 2026-10-29 | A session fixation vulnerability has been identified in osTicket v1.18.2. This security fl | |
CVE-2026-10639 |
medium | 4.8 | 0.0023 | 2026-10-29 | In Zephyr's native IPv4 stack, icmpv4_handle_echo_request() in subsys/net/ip/icmpv4.c buil | |
CVE-2026-9307 |
medium | 6.3 | 0.0030 | 2026-10-29 | A sensitive information disclosure security issue exists within the affected CompactLogix | |
CVE-2026-12003 |
medium | 5.3 | 0.0014 | 2026-10-29 | To allow builds of Python to be run from an in-tree layout (rather than an installed file | |
CVE-2026-47748 |
medium | 5.5 | 0.0016 | 2026-10-29 | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion | |
CVE-2026-47927 |
medium | 5.5 | 0.0016 | 2026-10-29 | DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerabilit | |
CVE-2026-47934 |
medium | 5.5 | 0.0016 | 2026-10-29 | DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerabilit | |
CVE-2026-47963 |
medium | 5.5 | 0.0016 | 2026-10-29 | DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerabilit | |
CVE-2026-53844 |
medium | 6.0 | 0.0021 | 2026-10-29 | OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shar | |
CVE-2026-53847 |
medium | 5.3 | 0.0018 | 2026-10-29 | OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memor | |
CVE-2026-53850 |
medium | 6.8 | 0.0009 | 2026-10-29 | OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the | |
CVE-2026-53851 |
medium | 6.3 | 0.0019 | 2026-10-29 | OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reac | |
CVE-2026-0127 |
medium | 6.5 | 0.0025 | 2026-10-29 | In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible ou |