Browse All CVEs
9,186 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-109425 |
medium | 6.9 | 0.0019 | 2026-10-29 | Tink-go (tink-crypto/tink-go) through 2.8.0 contains an input-validation vulnerability whe | |
CVE-2026-109438 |
medium | 6.3 | 0.0036 | 2026-10-29 | 3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack | |
CVE-2026-108706 |
medium | 5.3 | 0.0019 | 2026-10-29 | eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downl | |
CVE-2026-104083 |
medium | 5.3 | 0.0033 | 2026-10-29 | SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerabilit | |
CVE-2026-104079 |
medium | 5.3 | 0.0019 | 2026-10-29 | Envira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its ga | |
CVE-2026-104073 |
medium | 6.9 | 0.0037 | 2026-10-29 | NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability | |
CVE-2026-104074 |
medium | 6.9 | 0.0031 | 2026-10-29 | Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote | |
CVE-2023-54328 |
medium | 5.1 | 0.0047 | 2026-10-29 | AimOne Video Converter 2.04 Build 103 contains a buffer overflow vulnerability in its regi | |
CVE-2020-37202 |
medium | 4.6 | — | 2026-10-29 | NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to | |
CVE-2020-37200 |
medium | 4.6 | — | 2026-10-29 | NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key i | |
CVE-2020-37201 |
medium | 4.6 | — | 2026-10-29 | NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name | |
CVE-2026-88892 |
medium | 5.3 | 0.0033 | 2026-10-29 | In OpenPanel through 2.3.0, the data importer fetches a caller-supplied URL with plain fet | |
CVE-2026-85615 |
medium | 5.3 | 0.0024 | 2026-10-29 | Openpanel before 2.3.0 contains an insecure direct object reference vulnerability in the r | |
CVE-2026-85611 |
medium | 5.3 | 0.0024 | 2026-10-29 | OpenPanel before 2.3.0 contains a cross-tenant broken object level authorization vulnerabi | |
CVE-2026-85609 |
medium | 6.9 | 0.0050 | 2026-10-29 | Openpanel before 2.3.0 contains an unauthenticated full-read server-side request forgery ( | |
CVE-2026-68765 |
medium | 5.2 | 0.0018 | 2026-10-29 | hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in | |
CVE-2026-63169 |
medium | 5.3 | 0.0029 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerabilit | |
CVE-2026-63171 |
medium | 5.1 | 0.0022 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerabilit | |
CVE-2026-63168 |
medium | 5.1 | 0.0028 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerabilit | |
CVE-2026-63157 |
medium | 5.1 | 0.0022 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerabilit | |
CVE-2026-63156 |
medium | 5.1 | 0.0030 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerabi | |
CVE-2026-63147 |
medium | 5.1 | 0.0021 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerabilit | |
CVE-2026-63148 |
medium | 5.1 | 0.0018 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerabilit | |
CVE-2026-56101 |
medium | 6.0 | 0.0060 | 2026-10-29 | OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee802 | |
CVE-2026-112328 |
medium | 5.3 | 0.0016 | 2026-10-29 | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerabili | |
CVE-2026-97782 |
medium | 6.8 | 0.0053 | 2026-10-29 | Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to per | |
CVE-2026-97744 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-97740 |
medium | 6.5 | 0.0086 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Of | |
CVE-2026-97014 |
medium | 5.5 | 0.0050 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-97005 |
medium | 5.5 | 0.0035 | 2026-10-29 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-96935 |
medium | 5.5 | 0.0035 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS | |
CVE-2026-96921 |
medium | 5.5 | 0.0039 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows Message Queuing Q | |
CVE-2026-96857 |
medium | 5.5 | 0.0038 | 2026-10-29 | Files or directories accessible to external parties in Windows Projected File System allow | |
CVE-2026-96851 |
medium | 5.5 | 0.0039 | 2026-10-29 | Buffer over-read in Windows Management Instrumentation allows an authorized attacker to di | |
CVE-2026-96855 |
medium | 5.5 | 0.0028 | 2026-10-29 | Improper access control in Windows Modern Device Management (MDM) allows an authorized att | |
CVE-2026-96849 |
medium | 5.5 | 0.0039 | 2026-10-29 | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker | |
CVE-2026-96848 |
medium | 5.5 | 0.0039 | 2026-10-29 | Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclo | |
CVE-2026-96315 |
medium | 5.5 | 0.0028 | 2026-10-29 | Missing authorization in Windows Overlay Filter allows an authorized attacker to perform t | |
CVE-2026-96316 |
medium | 5.5 | 0.0028 | 2026-10-29 | Improper access control in Windows Routing and Remote Access Service (RRAS) allows an auth | |
CVE-2026-96314 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose info | |
CVE-2026-96311 |
medium | 5.5 | 0.0028 | 2026-10-29 | Improper authorization in Windows Network List Service allows an authorized attacker to pe | |
CVE-2026-96247 |
medium | 5.5 | 0.0039 | 2026-10-29 | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker | |
CVE-2026-96218 |
medium | 5.5 | 0.0055 | 2026-10-29 | Improper access control in Windows Update Stack allows an authorized attacker to perform t | |
CVE-2026-96204 |
medium | 6.5 | 0.0078 | 2026-10-29 | Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate p | |
CVE-2026-96183 |
medium | 5.5 | 0.0038 | 2026-10-29 | Missing authentication for critical function in Windows Health and Optimized Experiences S | |
CVE-2026-95904 |
medium | 5.5 | 0.0030 | 2026-10-29 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclos | |
CVE-2026-94506 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose | |
CVE-2026-88208 |
medium | 4.6 | 0.0027 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-88209 |
medium | 4.6 | 0.0036 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-88201 |
medium | 6.5 | 0.0063 | 2026-10-29 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose inf |