Browse All CVEs
9,400 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-6166 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security vulnerability has been detected in code-projects Vehicle Showroom Management Sy | |
CVE-2026-6167 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was detected in code-projects Faculty Management System 1.0. Impacted is a | |
CVE-2026-0232 |
medium | 4.0 | 0.0015 | 2026-10-29 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Window | |
CVE-2026-35565 |
medium | 5.4 | 0.0047 | 2026-10-29 | Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI V | |
CVE-2026-6182 |
medium | 5.5 | 0.0031 | 2026-10-29 | A vulnerability was identified in code-projects Simple Content Management System 1.0. Affe | |
CVE-2026-6183 |
medium | 5.5 | 0.0031 | 2026-10-29 | A security flaw has been discovered in code-projects Simple Content Management System 1.0. | |
CVE-2026-6187 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Th | |
CVE-2026-6188 |
medium | 5.5 | 0.0025 | 2026-10-29 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted | |
CVE-2026-6231 |
medium | 5.3 | 0.0018 | 2026-10-29 | The bson_validate function may return early on specific inputs and incorrectly report succ | |
CVE-2026-39940 |
medium | 5.3 | 0.0027 | 2026-10-29 | ChurchCRM is an open-source church management system. Prior to 7.0.0, it was possible in m | |
CVE-2026-6189 |
medium | 5.5 | 0.0027 | 2026-10-29 | A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. | |
CVE-2026-6193 |
medium | 5.5 | 0.0025 | 2026-10-29 | A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1. Affec | |
CVE-2026-40038 |
medium | 5.1 | 0.0016 | 2026-10-29 | Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to | |
CVE-2026-40041 |
medium | 5.3 | 0.0011 | 2026-10-29 | Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to | |
CVE-2026-6218 |
medium | 5.3 | 0.0028 | 2026-10-29 | A vulnerability was found in aandrew-me ytDownloader up to 3.20.2. Affected by this issue | |
CVE-2026-33947 |
medium | 5.5 | 0.0023 | 2026-10-29 | jq is a command-line JSON processor. In versions 1.8.1 and below, functions jv_setpath(), | |
CVE-2026-6224 |
medium | 5.5 | 0.0030 | 2026-10-29 | A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. T | |
CVE-2026-39956 |
medium | 6.1 | 0.0017 | 2026-10-29 | jq is a command-line JSON processor. Prior to version 1.8.2, the _strindices builtin in jq | |
CVE-2026-39979 |
medium | 6.9 | 0.0056 | 2026-10-29 | jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e | |
CVE-2026-0512 |
medium | 6.1 | 0.0023 | 2026-10-29 | Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Managem | |
CVE-2026-24318 |
medium | 4.2 | 0.0017 | 2026-10-29 | Due to an Insecure session management vulnerability in SAP Business Objects Business Intel | |
CVE-2026-27672 |
medium | 4.3 | 0.0017 | 2026-10-29 | The Material Master application does not enforce authorization checks for authenticated us | |
CVE-2026-27673 |
medium | 4.9 | 0.0016 | 2026-10-29 | Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an | |
CVE-2026-27674 |
medium | 6.1 | 0.0019 | 2026-10-29 | Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro | |
CVE-2026-27676 |
medium | 4.3 | 0.0016 | 2026-10-29 | Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Technical Obj | |
CVE-2026-27677 |
medium | 6.5 | 0.0018 | 2026-10-29 | Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Reference Equ | |
CVE-2026-27678 |
medium | 6.5 | 0.0018 | 2026-10-29 | Due to missing authorization checks in the SAP S/4HANA backend OData Service (Manage Refer | |
CVE-2026-27679 |
medium | 6.5 | 0.0018 | 2026-10-29 | Due to missing authorization checks in the SAP S/4HANA frontend OData Service (Manage Refe | |
CVE-2026-27683 |
medium | 4.1 | 0.0019 | 2026-10-29 | SAP BusinessObjects Business Intelligence application allows an authenticated attacker to | |
CVE-2026-34069 |
medium | 5.3 | 0.0030 | 2026-10-29 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol base | |
CVE-2026-39417 |
medium | 5.5 | 0.0024 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an i | |
CVE-2026-34257 |
medium | 6.1 | 0.0015 | 2026-10-29 | Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthe | |
CVE-2026-34261 |
medium | 6.5 | 0.0021 | 2026-10-29 | Due to a missing authorization check in SAP Business Analytics and SAP Content Management, | |
CVE-2026-34262 |
medium | 4.3 | 0.0030 | 2026-10-29 | Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer | |
CVE-2026-34264 |
medium | 6.5 | 0.0027 | 2026-10-29 | During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system re | |
CVE-2026-39422 |
medium | 6.9 | 0.0022 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a St | |
CVE-2026-39423 |
medium | 6.9 | 0.0017 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an E | |
CVE-2026-39424 |
medium | 5.3 | 0.0037 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, the chat | |
CVE-2026-39425 |
medium | 5.1 | 0.0018 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a St | |
CVE-2026-39426 |
medium | 5.1 | 0.0019 | 2026-10-29 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a St | |
CVE-2026-24032 |
medium | 6.9 | 0.0025 | 2026-10-29 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The a | |
CVE-2026-31924 |
medium | 5.3 | 0.0024 | 2026-10-29 | Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. tencent-c | |
CVE-2026-33892 |
medium | 5.1 | 0.0021 | 2026-10-29 | A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= | |
CVE-2026-33929 |
medium | 4.3 | 0.0071 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-24069 |
medium | 5.4 | 0.0019 | 2026-10-29 | Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, al | |
CVE-2026-30480 |
medium | 6.5 | 0.0027 | 2026-10-29 | A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS | |
CVE-2026-37980 |
medium | 4.8 | 0.0036 | 2026-10-29 | A flaw was found in Keycloak, specifically in the organization selection login page. A rem | |
CVE-2026-4913 |
medium | 5.7 | 0.0059 | 2026-10-29 | Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a r | |
CVE-2026-4914 |
medium | 5.4 | 0.0034 | 2026-10-29 | Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker t | |
CVE-2025-65136 |
medium | 6.1 | 0.0018 | 2026-10-29 | In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /st |