Browse All CVEs
10,124 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-43879 |
medium | 5.4 | 0.0020 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, an aut | |
CVE-2026-43880 |
medium | 5.3 | 0.0029 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, object | |
CVE-2026-43881 |
medium | 5.3 | 0.0032 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, object | |
CVE-2026-43882 |
medium | 4.3 | 0.0021 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, the un | |
CVE-2026-43883 |
medium | 4.2 | 0.0020 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin | |
CVE-2026-7010 |
medium | 6.5 | 0.0023 | 2026-10-29 | HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or co | |
CVE-2026-42554 |
medium | 5.3 | 0.0021 | 2026-10-29 | Fiber is a web framework for Go. Prior to 2.52.12 and 3.1.0, Cross-Site Scripting vulnerab | |
CVE-2026-43901 |
medium | 6.8 | 0.0034 | 2026-10-29 | Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, the | |
CVE-2026-0502 |
medium | 5.4 | 0.0012 | 2026-10-29 | Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform | |
CVE-2026-27682 |
medium | 6.1 | 0.0022 | 2026-10-29 | Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application S | |
CVE-2026-34258 |
medium | 4.7 | 0.0025 | 2026-10-29 | SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameter | |
CVE-2026-40129 |
medium | 4.3 | 0.0026 | 2026-10-29 | Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and | |
CVE-2026-40132 |
medium | 5.4 | 0.0019 | 2026-10-29 | Due to missing authorization check in SAP Strategic Enterprise Management (Scorecard Wizar | |
CVE-2026-40133 |
medium | 6.3 | 0.0022 | 2026-10-29 | Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated | |
CVE-2026-40134 |
medium | 4.3 | 0.0020 | 2026-10-29 | Due to insufficient authorization checks in the SAP Incentive and Commission Management ap | |
CVE-2026-40135 |
medium | 6.5 | 0.0140 | 2026-10-29 | An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for A | |
CVE-2026-40136 |
medium | 4.3 | 0.0029 | 2026-10-29 | SAP Financial Consolidation allows an authenticated attacker to disconnect other users by | |
CVE-2026-40137 |
medium | 6.1 | 0.0021 | 2026-10-29 | SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to cra | |
CVE-2026-7255 |
medium | 6.5 | 0.0020 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attemp | |
CVE-2026-7257 |
medium | 4.4 | 0.0011 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability | |
CVE-2026-41530 |
medium | 4.6 | 0.0015 | 2026-10-29 | The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains | |
CVE-2026-1681 |
medium | 6.1 | 0.0014 | 2026-10-29 | Issuing an ICMP ping via the `net ping` shell command to a device's own IPv4 address cause | |
CVE-2024-54017 |
medium | 6.9 | 0.0031 | 2026-10-29 | A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SI | |
CVE-2025-40948 |
medium | 6.1 | 0.0040 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGG | |
CVE-2026-45210 |
medium | 5.4 | 0.0017 | 2026-10-29 | Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Expl | |
CVE-2026-45212 |
medium | 5.3 | 0.0022 | 2026-10-29 | Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-ass | |
CVE-2026-45215 |
medium | 5.3 | 0.0020 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay w | |
CVE-2026-33603 |
medium | 5.3 | 0.0021 | 2026-10-29 | Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SC | |
CVE-2026-40016 |
medium | 6.5 | 0.0034 | 2026-10-29 | Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypa | |
CVE-2026-40020 |
medium | 4.3 | 0.0026 | 2026-10-29 | Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot | |
CVE-2026-40638 |
medium | 6.7 | 0.0012 | 2026-10-29 | Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnece | |
CVE-2026-5061 |
medium | 4.7 | 0.0015 | 2026-10-29 | The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass i | |
CVE-2026-7431 |
medium | 4.4 | 0.0018 | 2026-10-29 | An incorrect permission assignment for critical resource of Ivanti Secure Access Client | |
CVE-2026-8109 |
medium | 6.5 | 0.0070 | 2026-10-29 | An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2 | |
CVE-2026-8368 |
medium | 6.5 | 0.0027 | 2026-10-29 | LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization he | |
CVE-2023-30059 |
medium | 5.4 | 0.0017 | 2026-10-29 | An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and se | |
CVE-2026-25431 |
medium | 5.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in WPMU DEV Hustle allows Exploiting Incorrectly Confi | |
CVE-2026-8407 |
medium | 4.3 | 0.0020 | 2026-10-29 | Missing authorization in the PAM module in Devolutions Server allows an authenticated user | |
CVE-2026-25690 |
medium | 6.5 | 0.0024 | 2026-10-29 | An improper neutralization of argument delimiters in a command ('argument injection') vuln | |
CVE-2026-32185 |
medium | 5.5 | 0.0047 | 2026-10-29 | Files or directories accessible to external parties in Microsoft Teams allows an unauthori | |
CVE-2026-34350 |
medium | 6.5 | 0.0078 | 2026-10-29 | Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attack | |
CVE-2026-34663 |
medium | 5.5 | 0.0017 | 2026-10-29 | Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds read vulner | |
CVE-2026-35429 |
medium | 4.3 | 0.0050 | 2026-10-29 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium- | |
CVE-2026-35440 |
medium | 5.5 | 0.0045 | 2026-10-29 | Files or directories accessible to external parties in Microsoft Office Word allows an una | |
CVE-2026-40374 |
medium | 6.5 | 0.0087 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Power Automate allows an aut | |
CVE-2026-40416 |
medium | 4.3 | 0.0035 | 2026-10-29 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium- | |
CVE-2026-40421 |
medium | 4.3 | 0.0062 | 2026-10-29 | Files or directories accessible to external parties in Microsoft Office Word allows an una | |
CVE-2026-41100 |
medium | 4.4 | 0.0025 | 2026-10-29 | Improper access control in M365 Copilot allows an authorized attacker to perform spoofing | |
CVE-2026-41101 |
medium | 5.5 | 0.0029 | 2026-10-29 | Improper access control in Microsoft Office Word allows an authorized attacker to perform | |
CVE-2026-41102 |
medium | 5.5 | 0.0029 | 2026-10-29 | Improper access control in Microsoft Office PowerPoint allows an authorized attacker to pe |