Browse All CVEs
10,007 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2023-31309 |
medium | 6.8 | 0.0011 | 2026-10-29 | Improper validation in Power Management Firmware (PMFW) may allow an attacker with privile | |
CVE-2026-0427 |
medium | 4.6 | 0.0011 | 2026-10-29 | Improper cleanup of shared register resources in GPU firmware could allow an admin-privile | |
CVE-2026-6646 |
medium | 6.4 | 0.0028 | 2026-10-29 | The The7 theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'dt_defa | |
CVE-2026-41960 |
medium | 5.8 | 0.0009 | 2026-10-29 | Permission control vulnerability in calls. Impact: Successful exploitation of this vulnera | |
CVE-2026-41961 |
medium | 5.9 | 0.0008 | 2026-10-29 | Permission control vulnerability in contacts. Impact: Successful exploitation of this vuln | |
CVE-2026-41965 |
medium | 5.6 | 0.0013 | 2026-10-29 | Use-After-Free (UAF) vulnerability in the web. Impact: Successful exploitation of this vul | |
CVE-2026-41966 |
medium | 5.6 | 0.0011 | 2026-10-29 | Permission control vulnerability in the smart sensing service. Impact: Successful exploita | |
CVE-2026-41967 |
medium | 5.9 | 0.0008 | 2026-10-29 | Permission control vulnerability in the manufacturability design module. Impact: Successfu | |
CVE-2026-41968 |
medium | 5.9 | 0.0008 | 2026-10-29 | Permission control vulnerability in the manufacturability design module. Impact: Successfu | |
CVE-2026-41969 |
medium | 6.2 | 0.0010 | 2026-10-29 | Permission control vulnerability in the projection module. Impact: Successful exploitation | |
CVE-2026-41970 |
medium | 6.8 | 0.0013 | 2026-10-29 | Out-of-bounds write vulnerability in the distributed file system module. Impact: Successfu | |
CVE-2026-41971 |
medium | 5.5 | 0.0008 | 2026-10-29 | Permission control vulnerability in the security control module. Impact: Successful exploi | |
CVE-2026-8454 |
medium | 5.3 | 0.0019 | 2026-10-29 | Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write o | |
CVE-2026-8503 |
medium | 6.5 | 0.0024 | 2026-10-29 | Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session | |
CVE-2025-67437 |
medium | 6.5 | 0.0022 | 2026-10-29 | Medical Management System a81df1ce700a9662cb136b27af47f4cbde64156b is vulnerable to Insecu | |
CVE-2026-8669 |
medium | 6.5 | 0.0032 | 2026-10-29 | Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted m | |
CVE-2026-45773 |
medium | 5.1 | 0.0012 | 2026-10-29 | Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prio | |
CVE-2026-42207 |
medium | 6.1 | 0.0018 | 2026-10-29 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alt | |
CVE-2026-42458 |
medium | 5.3 | 0.0032 | 2026-10-29 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alt | |
CVE-2026-44309 |
medium | 5.3 | 0.0014 | 2026-10-29 | Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC id | |
CVE-2026-44310 |
medium | 5.4 | 0.0011 | 2026-10-29 | Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC id | |
CVE-2026-46383 |
medium | 5.5 | 0.0045 | 2026-10-29 | Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior | |
CVE-2026-44366 |
medium | 6.1 | 0.0028 | 2026-10-29 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-45007 |
medium | 5.3 | 0.0026 | 2026-10-29 | phpMyFAQ before 4.1.2 contains missing permission checks in ConfigurationTabController.php | |
CVE-2026-45009 |
medium | 5.3 | 0.0021 | 2026-10-29 | phpMyFAQ before 4.1.2 contains an insufficient authorization vulnerability in admin-api ro | |
CVE-2026-45616 |
medium | 5.1 | 0.0029 | 2026-10-29 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-45622 |
medium | 5.3 | 0.0032 | 2026-10-29 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-46360 |
medium | 5.1 | 0.0019 | 2026-10-29 | phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer | |
CVE-2026-46363 |
medium | 5.1 | 0.0019 | 2026-10-29 | phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation | |
CVE-2026-46365 |
medium | 5.3 | 0.0022 | 2026-10-29 | phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/ | |
CVE-2026-8704 |
medium | 6.5 | 0.0032 | 2026-10-29 | Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be m | |
CVE-2026-46719 |
medium | 6.5 | 0.0031 | 2026-10-29 | Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric na | |
CVE-2026-8723 |
medium | 6.3 | 0.0040 | 2026-10-29 | ### Summary `qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` a | |
CVE-2026-8725 |
medium | 5.5 | 0.0031 | 2026-10-29 | A weakness has been identified in CoreWorxLab CAAL up to 1.6.0. The affected element is an | |
CVE-2026-8734 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was determined in Oinone Pamirs up to 7.2.0. Affected by this issue is the | |
CVE-2026-8737 |
medium | 5.5 | 0.0040 | 2026-10-29 | A weakness has been identified in Sanluan PublicCMS 5.202506.d. This issue affects the fun | |
CVE-2026-8738 |
medium | 5.5 | 0.0033 | 2026-10-29 | A security vulnerability has been detected in Sanluan PublicCMS 5.202506.d. Impacted is th | |
CVE-2026-8739 |
medium | 5.5 | 0.0028 | 2026-10-29 | A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the | |
CVE-2026-8755 |
medium | 5.5 | 0.0061 | 2026-10-29 | A flaw has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd93 | |
CVE-2026-8756 |
medium | 5.5 | 0.0051 | 2026-10-29 | A vulnerability has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da | |
CVE-2026-8758 |
medium | 5.5 | 0.0028 | 2026-10-29 | A vulnerability was determined in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This impacts a | |
CVE-2026-8759 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown func | |
CVE-2026-8771 |
medium | 5.5 | 0.0026 | 2026-10-29 | A security flaw has been discovered in linlinjava litemall up to 1.8.0. This impacts the f | |
CVE-2026-8785 |
medium | 5.5 | 0.0025 | 2026-10-29 | A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by | |
CVE-2026-41119 |
medium | 6.8 | 0.0014 | 2026-10-29 | Dell Live Optics Windows and Personal Edition collectors contain an improper certificate v | |
CVE-2026-8803 |
medium | 6.3 | 0.0018 | 2026-10-29 | A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2. Impacted is | |
CVE-2026-20685 |
medium | 6.5 | 0.0027 | 2026-10-29 | An attacker in a privileged network position may be able to leak sensitive information. A | |
CVE-2026-32848 |
medium | 5.7 | 0.0008 | 2026-10-29 | NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() w | |
CVE-2026-32849 |
medium | 5.7 | 0.0011 | 2026-10-29 | NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cry | |
CVE-2026-45231 |
medium | 5.3 | 0.0019 | 2026-10-29 | DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fi |