Browse All CVEs
10,187 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-41684 |
medium | 6.5 | 0.0041 | 2026-10-29 | Incus is a system container and virtual machine manager. Prior to version 7.0.0, backup.Ge | |
CVE-2026-41685 |
medium | 4.3 | 0.0033 | 2026-10-29 | Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads o | |
CVE-2026-32686 |
medium | 6.9 | 0.0048 | 2026-10-29 | Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated r | |
CVE-2026-41519 |
medium | 5.4 | 0.0027 | 2026-10-29 | Weblate is a web based localization tool. Prior to version 5.17.1, when a user changes the | |
CVE-2026-41650 |
medium | 6.1 | 0.0024 | 2026-10-29 | fast-xml-parser allows users to process XML from JS object without C/C++ based libraries o | |
CVE-2026-41654 |
medium | 5.3 | 0.0037 | 2026-10-29 | Weblate is a web based localization tool. Prior to version 5.17.1, an authenticated user w | |
CVE-2026-41687 |
medium | 4.3 | 0.0020 | 2026-10-29 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4. | |
CVE-2026-41689 |
medium | 6.0 | 0.0018 | 2026-10-29 | Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 a | |
CVE-2026-44263 |
medium | 4.3 | 0.0034 | 2026-10-29 | Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, | |
CVE-2026-44264 |
medium | 4.3 | 0.0027 | 2026-10-29 | Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer u | |
CVE-2026-8083 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This | |
CVE-2026-39823 |
medium | 6.1 | 0.0031 | 2026-10-29 | CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a | |
CVE-2026-39825 |
medium | 5.3 | 0.0039 | 2026-10-29 | ReverseProxy can forward queries containing parameters not visible to Rewrite functions. W | |
CVE-2026-39826 |
medium | 6.1 | 0.0037 | 2026-10-29 | If a trusted template author were to write a <script> tag containing an empty 'type' attri | |
CVE-2026-42241 |
medium | 5.3 | 0.0027 | 2026-10-29 | ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version | |
CVE-2026-43510 |
medium | 5.1 | 0.0040 | 2026-10-29 | manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an orga | |
CVE-2026-8142 |
medium | 6.5 | 0.0011 | 2026-10-29 | VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due | |
CVE-2026-41692 |
medium | 4.7 | 0.0014 | 2026-10-29 | i18nextify is a JavaScript library that adds website internationalization via a script tag | |
CVE-2026-8098 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted | |
CVE-2026-32207 |
medium | 6.1 | 0.0058 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Az | |
CVE-2026-33823 |
medium | 6.5 | 0.0072 | 2026-10-29 | Improper authorization in Microsoft Teams allows an authorized attacker to disclose inform | |
CVE-2026-40214 |
medium | 6.3 | 0.0021 | 2026-10-29 | In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce proj | |
CVE-2026-41928 |
medium | 6.9 | 0.0042 | 2026-10-29 | Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controll | |
CVE-2026-41929 |
medium | 5.1 | 0.0024 | 2026-10-29 | Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerabil | |
CVE-2026-6736 |
medium | 6.3 | 0.0027 | 2026-10-29 | An authentication bypass vulnerability was identified in GitHub Enterprise Server that all | |
CVE-2026-7541 |
medium | 6.3 | 0.0039 | 2026-10-29 | A denial of service vulnerability was identified in GitHub Enterprise Server that allowed | |
CVE-2026-8106 |
medium | 5.9 | 0.0016 | 2026-10-29 | A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Ma | |
CVE-2026-8115 |
medium | 5.5 | 0.0057 | 2026-10-29 | A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4. This affe | |
CVE-2026-3508 |
medium | 6.8 | 0.0014 | 2026-10-29 | An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface | |
CVE-2026-8126 |
medium | 5.5 | 0.0025 | 2026-10-29 | A flaw has been found in SourceCodester Comment System 1.0. This issue affects some unknow | |
CVE-2026-8128 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was found in SourceCodester SUP Online Shopping 1.0. The affected element | |
CVE-2026-41645 |
medium | 5.3 | 0.0035 | 2026-10-29 | Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to | |
CVE-2026-41646 |
medium | 5.5 | 0.0011 | 2026-10-29 | Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to | |
CVE-2026-42150 |
medium | 4.8 | 0.0017 | 2026-10-29 | wlc is a Weblate command-line client using Weblate's REST API. Prior to version 2.0.0, the | |
CVE-2026-8129 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was determined in SourceCodester SUP Online Shopping 1.0. The impacted ele | |
CVE-2026-8130 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. This affects an | |
CVE-2026-8131 |
medium | 5.5 | 0.0032 | 2026-10-29 | A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0. This impact | |
CVE-2026-8132 |
medium | 5.5 | 0.0025 | 2026-10-29 | A weakness has been identified in CodeAstro Leave Management System 1.0. Affected is an un | |
CVE-2026-8133 |
medium | 5.5 | 0.0027 | 2026-10-29 | A security vulnerability has been detected in zyx0814 FilePress up to 2.2.0. Affected by t | |
CVE-2023-42343 |
medium | 6.1 | 0.0059 | 2026-10-29 | A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-onli | |
CVE-2023-42345 |
medium | 6.1 | 0.0015 | 2026-10-29 | A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGr | |
CVE-2023-47268 |
medium | 5.3 | 0.0072 | 2026-10-29 | 2 PoC | In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf pro |
CVE-2024-30167 |
medium | 6.3 | 0.0114 | 2026-10-29 | /cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated u | |
CVE-2024-33722 |
medium | 6.3 | 0.0024 | 2026-10-29 | SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php | |
CVE-2024-33724 |
medium | 5.4 | 0.0063 | 2026-10-29 | SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter | |
CVE-2026-8149 |
medium | 5.1 | 0.0016 | 2026-10-29 | A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, A | |
CVE-2026-3318 |
medium | 5.3 | 0.0034 | 2026-10-29 | Open redirection vulnerability in the latest demo version of the Cradle eCommerce platform | |
CVE-2026-41161 |
medium | 6.9 | 0.0033 | 2026-10-29 | Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, | |
CVE-2026-41493 |
medium | 6.9 | 0.0039 | 2026-10-29 | YARD is a Ruby Documentation tool. Prior to version 0.9.42, a path traversal vulnerability | |
CVE-2026-41509 |
medium | 6.9 | 0.0034 | 2026-10-29 | CROSS implementation contains reference and optimized implementations of the CROSS post-qu |