Browse All CVEs
9,475 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-8032 |
medium | 5.5 | 0.0028 | 2026-10-29 | A flaw has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. The impacted ele | |
CVE-2026-8033 |
medium | 5.5 | 0.0029 | 2026-10-29 | A vulnerability has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. This af | |
CVE-2026-3291 |
medium | 6.9 | 0.0010 | 2026-10-29 | Samsung Print Service Plugin for Android is potentially vulnerable to information disclosu | |
CVE-2026-40296 |
medium | 5.4 | 0.0022 | 2026-10-29 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The HTML w | |
CVE-2026-41310 |
medium | 5.3 | 0.0031 | 2026-10-29 | OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1 | |
CVE-2026-41483 |
medium | 5.9 | 0.0032 | 2026-10-29 | OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments. In ver | |
CVE-2026-41484 |
medium | 5.9 | 0.0034 | 2026-10-29 | OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollec | |
CVE-2026-40003 |
medium | 6.8 | 0.0030 | 2026-10-29 | ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via US | |
CVE-2026-44599 |
medium | 5.3 | 0.0029 | 2026-10-29 | Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008. | |
CVE-2026-44600 |
medium | 5.3 | 0.0038 | 2026-10-29 | Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clea | |
CVE-2026-41004 |
medium | 4.4 | 0.0017 | 2026-10-29 | When enabling trace logging in Spring Cloud Config Server sensitive information was placed | |
CVE-2026-41890 |
medium | 6.9 | 0.0041 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2026-41891 |
medium | 5.3 | 0.0027 | 2026-10-29 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular arch | |
CVE-2006-2073 |
medium | 5.0 | 0.0813 | 2026-10-29 | Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service | |
CVE-2023-0606 |
medium | 6.1 | 0.0064 | 2026-10-29 | Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7 | |
CVE-2023-0062 |
medium | 5.4 | 0.0057 | 2026-10-29 | The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of | |
CVE-2023-0697 |
medium | 6.5 | 0.0051 | 2026-10-29 | Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110. | |
CVE-2023-0704 |
medium | 6.5 | 0.0098 | 2026-10-29 | Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowe | |
CVE-2023-25166 |
medium | 6.5 | 0.0061 | 2026-10-29 | formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provi | |
CVE-2023-21435 |
medium | 5.5 | 0.0018 | 2026-10-29 | Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Re | |
CVE-2022-43552 |
medium | 5.9 | 0.0271 | 2026-10-29 | A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtu | |
CVE-2023-0177 |
medium | 5.4 | 0.0048 | 2026-10-29 | The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate | |
CVE-2023-0025 |
medium | 5.4 | 0.0034 | 2026-10-29 | SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to | |
CVE-2023-24521 |
medium | 6.1 | 0.0039 | 2026-10-29 | Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 7 | |
CVE-2022-42472 |
medium | 5.4 | 0.0046 | 2026-10-29 | A improper neutralization of crlf sequences in http headers ('http response splitting') vu | |
CVE-2023-22231 |
medium | 5.5 | 0.0032 | 2026-10-29 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out | |
CVE-2023-0902 |
medium | 5.4 | 0.0269 | 2026-10-29 | A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been c | |
CVE-2023-22972 |
medium | 5.4 | 0.0043 | 2026-10-29 | A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_ma | |
CVE-2023-23915 |
medium | 6.5 | 0.0088 | 2026-10-29 | A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 th | |
CVE-2023-23916 |
medium | 6.5 | 0.0174 | 2026-10-29 | An allocation of resources without limits or throttling vulnerability exists in curl <v7.8 | |
CVE-2023-20627 |
medium | 6.7 | 0.0009 | 2026-10-29 | In pqframework, there is a possible out of bounds write due to a missing bounds check. Thi | |
CVE-2023-0749 |
medium | 6.5 | 0.0065 | 2026-10-29 | The Ocean Extra WordPress plugin before 2.1.3 does not ensure that the template to be load | |
CVE-2023-27270 |
medium | 6.5 | 0.0061 | 2026-10-29 | SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, | |
CVE-2023-27462 |
medium | 4.3 | 0.0052 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The clien | |
CVE-2023-28665 |
medium | 5.4 | 0.0089 | 2026-10-29 | The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflecte | |
CVE-2023-28666 |
medium | 5.4 | 0.0044 | 2026-10-29 | The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross | |
CVE-2022-47924 |
medium | 6.5 | 0.0026 | 2026-10-29 | An high privileged attacker may pass crafted arguments to the validate function of csaf-va | |
CVE-2023-27535 |
medium | 5.9 | 0.0180 | 2026-10-29 | An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reus | |
CVE-2023-27536 |
medium | 5.9 | 0.0176 | 2026-10-29 | An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse featu | |
CVE-2023-27537 |
medium | 5.9 | 0.0190 | 2026-10-29 | A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separa | |
CVE-2023-23815 |
medium | 5.4 | 0.0039 | 2026-10-29 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Alan Jackson Multi | |
CVE-2023-25392 |
medium | 5.9 | 0.0043 | 2026-10-29 | Allegro Tech BigFlow <1.6 is vulnerable to Missing SSL Certificate Validation. | |
CVE-2023-27464 |
medium | 5.3 | 0.0046 | 2026-10-29 | A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All v | |
CVE-2023-2462 |
medium | 4.3 | 0.0080 | 2026-10-29 | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a | |
CVE-2023-2468 |
medium | 4.3 | 0.0080 | 2026-10-29 | Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 a | |
CVE-2023-30741 |
medium | 6.1 | 0.0039 | 2026-10-29 | Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - | |
CVE-2023-30742 |
medium | 6.1 | 0.0044 | 2026-10-29 | SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S | |
CVE-2023-29107 |
medium | 5.3 | 0.0065 | 2026-10-29 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 | |
CVE-2023-30985 |
medium | 5.5 | 0.0020 | 2026-10-29 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), | |
CVE-2023-32070 |
medium | 6.1 | 0.0065 | 2026-10-29 | XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn |