Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-11430 |
medium | 6.9 | 0.0096 | 2026-11-08 | Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token | |
CVE-2026-11322 |
medium | 6.5 | 0.0032 | 2026-11-08 | Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attack | |
CVE-2026-124553 |
high | 8.7 | 0.0054 | 2026-11-08 | BabelDOC from 0.3.61 before 0.7.0 contains a resource exhaustion vulnerability that allows | |
CVE-2026-124331 |
medium | 5.5 | 0.0025 | 2026-11-08 | A vulnerability was identified in Jinher OA C6. This impacts an unknown function of the fi | |
CVE-2026-124552 |
medium | 4.8 | 0.0019 | 2026-11-08 | 1 PoC | Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall |
CVE-2026-124551 |
medium | 6.0 | 0.0026 | 2026-11-08 | ClassroomIO through 1.0.0 contains an authorization bypass vulnerability that allows authe | |
CVE-2026-124474 |
medium | 5.3 | 0.0021 | 2026-11-08 | MRBS (Meeting Room Booking System) before 1.12.3 contains a reflected cross-site scripting | |
CVE-2026-124465 |
high | 7.1 | 0.0031 | 2026-11-08 | Trendyol kafka-konsumer from 2.3.3 before 2.6.18 contains a denial of service vulnerabilit | |
CVE-2026-124494 |
critical | 9.3 | 0.0034 | 2026-11-08 | SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability because the ht | |
CVE-2026-124493 |
critical | 9.3 | 0.0034 | 2026-11-08 | SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the Documen | |
CVE-2026-124492 |
high | 8.3 | 0.0021 | 2026-11-08 | SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchor | |
CVE-2026-124491 |
medium | 5.3 | 0.0017 | 2026-11-08 | SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the FileUpl | |
CVE-2026-124490 |
critical | 9.4 | 0.0036 | 2026-11-08 | OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClien | |
CVE-2026-124489 |
high | 7.1 | 0.0018 | 2026-11-08 | OpenEMR before 8.3.0 contains a broken access control vulnerability in portal/portal_payme | |
CVE-2026-124488 |
high | 8.6 | 0.0022 | 2026-11-08 | OpenEMR before 8.3.0 contains an authorization bypass vulnerability that allows authentica | |
CVE-2026-124487 |
high | 7.1 | 0.0021 | 2026-11-08 | OpenEMR before 8.4.0 contains an improper authorization vulnerability in the non-patient P | |
CVE-2026-124486 |
high | 8.7 | 0.0025 | 2026-11-08 | OpenEMR before 8.3.0 contains a missing authorization vulnerability in the classic documen | |
CVE-2026-124485 |
high | 7.1 | 0.0022 | 2026-11-08 | OpenEMR before 8.3.0 contains an authorization bypass vulnerability in the patient portal | |
CVE-2026-124484 |
high | 8.7 | 0.0025 | 2026-11-08 | OpenEMR before 8.4.0 contains a missing authorization vulnerability in portal onsite-docum | |
CVE-2026-124483 |
high | 8.7 | 0.0022 | 2026-11-08 | OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescri | |
CVE-2026-124482 |
high | 7.1 | 0.0022 | 2026-11-08 | OpenEMR before 8.4.0 contains an authorization bypass allowing low-privileged SMART standa | |
CVE-2026-124481 |
high | 7.1 | 0.0024 | 2026-11-08 | OpenEMR before 8.4.0 contains an improper authorization vulnerability in Rainforest patien | |
CVE-2026-124480 |
high | 8.7 | 0.0026 | 2026-11-08 | OpenEMR before 8.4.0 contains an authorization bypass vulnerability that allows low-privil | |
CVE-2026-124479 |
high | 7.1 | 0.0023 | 2026-11-08 | OpenEMR before 8.4.0 contains an arbitrary local file read vulnerability in REST document | |
CVE-2026-124478 |
high | 7.1 | 0.0018 | 2026-11-08 | OpenEMR before 8.3.0 contains a missing authorization vulnerability in the addRecall actio | |
CVE-2026-124477 |
high | 8.7 | 0.0025 | 2026-11-08 | OpenEMR before 8.3.0 contains a missing authorization vulnerability that allows low-privil | |
CVE-2026-124476 |
high | 7.1 | 0.0018 | 2026-11-08 | OpenEMR before 8.3.0 contains an insecure direct object reference in portal/lib/paylib.php | |
CVE-2026-124475 |
high | 7.1 | 0.0017 | 2026-11-08 | OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in portal/ | |
CVE-2026-124473 |
high | 7.1 | 0.0020 | 2026-11-08 | OpenEMR before 8.3.0 contains a broken object-level authorization vulnerability in the SOA | |
CVE-2026-124472 |
high | 8.6 | 0.0026 | 2026-11-08 | OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/s | |
CVE-2026-124471 |
high | 8.6 | 0.0026 | 2026-11-08 | OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/s | |
CVE-2026-124470 |
high | 7.1 | 0.0026 | 2026-11-08 | OpenEMR before 8.3.0 contains a broken object level authorization vulnerability in portal/ | |
CVE-2026-124469 |
critical | 9.4 | 0.0031 | 2026-11-08 | OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Sheet drug-invento | |
CVE-2026-124468 |
high | 7.1 | 0.0027 | 2026-11-08 | OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Standard REST API pati | |
CVE-2026-124467 |
high | 8.7 | 0.0046 | 2026-11-08 | OpenEMR before 8.4.0 contains a local file inclusion in the ESign router (library/ESign/Ro | |
CVE-2026-124466 |
medium | 6.9 | 0.0021 | 2026-11-08 | OpenEMR before 8.4.0 contains a server-side request forgery vulnerability that allows unau | |
CVE-2026-124464 |
high | 7.1 | 0.0027 | 2026-11-08 | OpenEMR before 8.4.0 contains an authorization bypass vulnerability that allows patient-sc | |
CVE-2026-124463 |
critical | 9.3 | 0.0026 | 2026-11-08 | OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows auth | |
CVE-2026-124462 |
high | 7.1 | 0.0027 | 2026-11-08 | OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in OnsiteD | |
CVE-2026-124461 |
high | 8.6 | 0.0026 | 2026-11-08 | OpenEMR before 8.3.0 contains a missing authorization vulnerability in library/ajax/upload | |
CVE-2026-124460 |
high | 7.1 | 0.0026 | 2026-11-08 | OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in PortalP | |
CVE-2026-124459 |
high | 8.6 | 0.0026 | 2026-11-08 | OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in many en | |
CVE-2026-124458 |
high | 7.1 | 0.0027 | 2026-11-08 | OpenEMR before 8.4.0 contains an authorization bypass vulnerability in the FHIR GET /fhir/ | |
CVE-2026-124457 |
high | 7.2 | 0.0030 | 2026-11-08 | OpenEMR before 8.3.0 contains a path traversal vulnerability in interface/billing/sl_eob_p | |
CVE-2026-124456 |
high | 7.1 | 0.0022 | 2026-11-08 | OpenEMR before 8.3.0 contains missing authorization and insecure direct object reference v | |
CVE-2026-124455 |
high | 7.1 | 0.0026 | 2026-11-08 | OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in OnsiteD | |
CVE-2026-124453 |
high | 7.1 | 0.0020 | 2026-11-08 | OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in portal/ | |
CVE-2026-124452 |
medium | 5.1 | 0.0017 | 2026-11-08 | OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in interface/for | |
CVE-2026-124451 |
medium | 6.0 | 0.0025 | 2026-11-08 | OpenEMR before 8.4.0 contains an authorization bypass vulnerability in its SMART on FHIR i | |
CVE-2026-124450 |
critical | 9.3 | 0.0049 | 2026-11-08 | 1 PoC | OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in |