Browse All CVEs
10,133 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2024-58335 |
medium | 5.0 | 0.0020 | 2026-10-29 | OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disall | |
CVE-2025-68532 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2024-35322 |
medium | 6.1 | 0.0022 | 2026-10-29 | MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulner | |
CVE-2024-39037 |
medium | 6.5 | 0.0024 | 2026-10-29 | MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerab | |
CVE-2024-29720 |
medium | 5.5 | 0.0018 | 2026-10-29 | An issue in Terra Informatica Software, Inc Sciter v.4.4.7.0 allows a local attacker to ob | |
CVE-2024-42718 |
medium | 6.5 | 0.0065 | 2026-10-29 | A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitra | |
CVE-2025-63031 |
medium | 5.3 | 0.0021 | 2026-10-29 | Missing Authorization vulnerability in WP Grids EasyTest – Simplify A/B Testing convertpro | |
CVE-2023-7331 |
medium | 5.1 | 0.0024 | 2026-10-29 | A vulnerability was detected in PKrystian Full-Stack-Bank up to bf73a0179e3ff07c0d7dc35297 | |
CVE-2026-0546 |
medium | 5.5 | 0.0044 | 2026-10-29 | A vulnerability was determined in code-projects Content Management System 1.0. This impact | |
CVE-2026-0578 |
medium | 5.5 | 0.0054 | 2026-10-29 | A vulnerability has been found in code-projects Online Product Reservation System 1.0. Aff | |
CVE-2026-0585 |
medium | 5.5 | 0.0044 | 2026-10-29 | A security vulnerability has been detected in code-projects Online Product Reservation Sys | |
CVE-2026-0589 |
medium | 5.5 | 0.0057 | 2026-10-29 | A vulnerability was found in code-projects Online Product Reservation System 1.0. Impacted | |
CVE-2026-0592 |
medium | 5.5 | 0.0044 | 2026-10-29 | A security flaw has been discovered in code-projects Online Product Reservation System 1.0 | |
CVE-2026-0605 |
medium | 5.5 | 0.0044 | 2026-10-29 | A security vulnerability has been detected in code-projects Online Music Site 1.0. Affecte | |
CVE-2026-0606 |
medium | 5.5 | 0.0046 | 2026-10-29 | A vulnerability was detected in code-projects Online Music Site 1.0. Affected by this issu | |
CVE-2026-0607 |
medium | 5.5 | 0.0044 | 2026-10-29 | A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part | |
CVE-2026-0643 |
medium | 5.5 | 0.0042 | 2026-10-29 | A flaw has been found in projectworlds House Rental and Property Listing 1.0. Impacted is | |
CVE-2026-0618 |
medium | 6.1 | 0.0018 | 2026-10-29 | Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects | |
CVE-2026-20026 |
medium | 5.8 | 0.0067 | 2026-10-29 | Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC | |
CVE-2026-20027 |
medium | 5.3 | 0.0060 | 2026-10-29 | Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC reque | |
CVE-2026-20029 |
medium | 4.9 | 0.0608 | 2026-10-29 | A vulnerability in the licensing features of Cisco Identity Services Engine (ISE) and | |
CVE-2026-0668 |
medium | 5.3 | 0.0048 | 2026-10-29 | Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki | |
CVE-2026-0670 |
medium | 6.1 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-0707 |
medium | 5.3 | 0.0040 | 2026-10-29 | A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissiv | |
CVE-2026-0700 |
medium | 5.5 | 0.0044 | 2026-10-29 | A vulnerability was determined in code-projects Intern Membership Management System 1.0. A | |
CVE-2026-0674 |
medium | 4.3 | 0.0022 | 2026-10-29 | Missing Authorization vulnerability in Campaign Monitor Campaign Monitor for WordPress all | |
CVE-2026-0676 |
medium | 5.3 | 0.0025 | 2026-10-29 | Missing Authorization vulnerability in G5Theme Zorka zorka allows Exploiting Incorrectly C | |
CVE-2026-0671 |
medium | 6.1 | 0.0024 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-24401 |
medium | 6.5 | 0.0037 | 2026-10-29 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS- | |
CVE-2026-20648 |
medium | 5.5 | 0.0025 | 2026-10-29 | A privacy issue was addressed by moving sensitive data to a protected location. This issue | |
CVE-2026-4628 |
medium | 4.3 | 0.0026 | 2026-10-29 | A flaw was found in Keycloak. An improper Access Control vulnerability in Keycloak’s User- | |
CVE-2026-23353 |
medium | 5.5 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ice: fix crash in eth | |
CVE-2026-33366 |
medium | 6.9 | 0.0039 | 2026-10-29 | Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router product | |
CVE-2026-4948 |
medium | 5.5 | 0.0013 | 2026-10-29 | A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by | |
CVE-2026-0394 |
medium | 5.3 | 0.0043 | 2026-10-29 | When dovecot has been configured to use per-domain passwd files, and they are placed one p | |
CVE-2026-27855 |
medium | 5.9 | 0.0032 | 2026-10-29 | Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If au | |
CVE-2026-27856 |
medium | 5.9 | 0.0040 | 2026-10-29 | Doveadm credentials are verified using direct comparison which is susceptible to timing or | |
CVE-2026-27859 |
medium | 5.3 | 0.0038 | 2026-10-29 | A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use | |
CVE-2026-27860 |
medium | 5.3 | 0.0030 | 2026-10-29 | If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot | |
CVE-2023-7339 |
medium | 6.5 | 0.0037 | 2026-10-29 | Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways a | |
CVE-2026-4309 |
medium | 6.3 | 0.0014 | 2026-10-29 | Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker | |
CVE-2026-4619 |
medium | 6.0 | 0.0033 | 2026-10-29 | Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtit | |
CVE-2026-4621 |
medium | 6.3 | 0.0016 | 2026-10-29 | Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker t | |
CVE-2026-32859 |
medium | 5.1 | 0.0020 | 2026-10-29 | ByteDance DeerFlow versions prior to commit 5dbb362 contain a stored cross-site scripting | |
CVE-2026-33205 |
medium | 4.8 | 0.0018 | 2026-10-29 | calibre is a cross-platform e-book manager for viewing, converting, editing, and catalogin | |
CVE-2026-33759 |
medium | 5.3 | 0.0031 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `o | |
CVE-2026-33761 |
medium | 5.3 | 0.0040 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, three | |
CVE-2026-33763 |
medium | 5.3 | 0.0033 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `g | |
CVE-2026-33764 |
medium | 4.3 | 0.0022 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the AI | |
CVE-2026-33766 |
medium | 5.3 | 0.0024 | 2026-10-29 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, `isSSR |