Browse All CVEs
1,808 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-116158 |
low | 2.0 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare com | |
CVE-2026-116162 |
low | 2.1 | 0.0038 | 2026-10-29 | Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request | |
CVE-2026-116184 |
low | 2.1 | 0.0024 | 2026-10-29 | OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm | |
CVE-2026-116186 |
low | 2.3 | 0.0021 | 2026-10-29 | OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-desce | |
CVE-2026-116197 |
low | 2.1 | 0.0016 | 2026-10-29 | Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry | |
CVE-2026-116054 |
low | 2.1 | 0.0021 | 2026-10-29 | A security vulnerability has been detected in SH3. This affects an unknown function of the | |
CVE-2026-116055 |
low | 2.1 | 0.0032 | 2026-10-29 | A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impa | |
CVE-2026-116099 |
low | 2.1 | 0.0038 | 2026-10-29 | A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1 | |
CVE-2026-116101 |
low | 2.1 | 0.0020 | 2026-10-29 | A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected el | |
CVE-2026-116103 |
low | 2.1 | 0.0023 | 2026-10-29 | A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects | |
CVE-2026-116104 |
low | 2.1 | 0.0023 | 2026-10-29 | A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This im | |
CVE-2026-116107 |
low | 2.1 | 0.0022 | 2026-10-29 | A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. A | |
CVE-2026-116109 |
low | 2.1 | 0.0115 | 2026-10-29 | A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects t | |
CVE-2026-116111 |
low | 2.1 | 0.0031 | 2026-10-29 | A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the funct | |
CVE-2026-116115 |
low | 2.3 | 0.0026 | 2026-10-29 | A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impa | |
CVE-2026-116230 |
low | 2.1 | 0.0032 | 2026-10-29 | A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The | |
CVE-2026-116263 |
low | 2.1 | 0.0014 | 2026-10-29 | A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is t | |
CVE-2026-96432 |
low | 2.1 | 0.0033 | 2026-10-29 | A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a | |
CVE-2026-107157 |
low | 2.0 | 0.0015 | 2026-10-29 | Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out- | |
CVE-2026-112880 |
low | 2.1 | 0.0019 | 2026-10-29 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splittin | |
CVE-2026-116215 |
low | 2.3 | 0.0016 | 2026-10-29 | MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData | |
CVE-2026-116486 |
low | 2.0 | 0.0014 | 2026-10-29 | Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class | |
CVE-2026-77057 |
low | 2.3 | 0.0028 | 2026-10-29 | boneIO Black does not limit authentication attempts on its web interface (POST /api/login) | |
CVE-2026-93847 |
low | 3.5 | 0.0017 | 2026-10-29 | Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the s | |
CVE-2026-93848 |
low | 2.7 | 0.0029 | 2026-10-29 | Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection filtering | |
CVE-2026-116538 |
low | 2.3 | 0.0029 | 2026-10-29 | HtmlSanitizer before 9.2.1039 and 10.0 prereleases before 10.0.1037-beta contains a cross- | |
CVE-2026-93846 |
low | 3.8 | 0.0015 | 2026-10-29 | Mattermost versions 11.7.x <= 11.7.10 fail to restrict which built-in roles can be assigne | |
CVE-2026-116370 |
low | 2.1 | 0.0040 | 2026-10-29 | A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The | |
CVE-2026-19742 |
low | 3.7 | 0.0025 | 2026-10-29 | The IPv6 stack derived the long-lived secret key used to compute RFC 7217 stable interface | |
CVE-2026-82390 |
low | 3.7 | 0.0020 | 2026-10-29 | The Espressif AES driver drivers/crypto/crypto_esp32_aes.c advertises a multi-session ciph | |
CVE-2026-111404 |
low | 3.7 | 0.0020 | 2026-10-29 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition' | |
CVE-2026-72755 |
low | 3.8 | 0.0018 | 2026-10-29 | Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, | |
CVE-2026-116471 |
low | 2.1 | 0.0020 | 2026-10-29 | A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is a | |
CVE-2026-116482 |
low | 2.0 | 0.0025 | 2026-10-29 | A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee7 | |
CVE-2026-57196 |
low | 2.3 | 0.0077 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-116578 |
low | 2.1 | 0.0046 | 2026-10-29 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, torna | |
CVE-2026-116671 |
low | 2.1 | 0.0011 | 2026-10-29 | Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order f | |
CVE-2026-116514 |
low | 2.1 | 0.0035 | 2026-10-29 | A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affect | |
CVE-2026-116515 |
low | 2.1 | 0.0025 | 2026-10-29 | A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vul | |
CVE-2026-116554 |
low | 2.0 | 0.0025 | 2026-10-29 | A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset | |
CVE-2026-116555 |
low | 1.9 | 0.0021 | 2026-10-29 | A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown | |
CVE-2026-116556 |
low | 1.9 | 0.0021 | 2026-10-29 | A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the | |
CVE-2026-116603 |
low | 2.0 | 0.0029 | 2026-10-29 | A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an un | |
CVE-2026-116608 |
low | 2.1 | 0.0015 | 2026-10-29 | A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected | |
CVE-2026-116639 |
low | 2.0 | 0.0020 | 2026-10-29 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8 | |
CVE-2026-116640 |
low | 2.0 | 0.0020 | 2026-10-29 | A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001afdee95b843f | |
CVE-2026-103325 |
low | 3.7 | 0.0011 | 2026-10-29 | The TiendaCrypto para WooCommerce WordPress plugin through 1.2.1 does not correctly verify | |
CVE-2026-18451 |
low | 3.1 | 0.0015 | 2026-10-29 | The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. We | |
CVE-2026-110737 |
low | 2.3 | 0.0019 | 2026-10-29 | The push endpoint of a Vaadin application that uses server push reflects the request Origi | |
CVE-2026-116894 |
low | 2.3 | 0.0016 | 2026-10-29 | REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows |