Browse All CVEs
10,485 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-116855 |
medium | 5.4 | 0.0014 | 2026-10-29 | Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-fre | |
CVE-2026-81472 |
medium | 4.2 | 0.0017 | 2026-10-29 | Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, an | |
CVE-2026-115957 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-116404 |
medium | 6.5 | 0.0020 | 2026-10-29 | Missing Authorization vulnerability in David Anderson Redux Framework redux-framework allo | |
CVE-2026-55369 |
medium | 6.5 | 0.0026 | 2026-10-29 | Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoi | |
CVE-2026-67077 |
medium | 4.2 | 0.0012 | 2026-10-29 | HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could all | |
CVE-2026-67079 |
medium | 6.4 | 0.0016 | 2026-10-29 | HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker | |
CVE-2026-67080 |
medium | 6.5 | 0.0034 | 2026-10-29 | HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper hand | |
CVE-2026-93515 |
medium | 6.8 | 0.0019 | 2026-10-29 | A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 | |
CVE-2026-93516 |
medium | 5.5 | 0.0019 | 2026-10-29 | A use-after-free caused by lack of lifecycle management when adding / removing XInput mast | |
CVE-2026-50541 |
medium | 6.5 | 0.0037 | 2026-10-29 | Xibo is an open source digital signage platform with a web content management system and W | |
CVE-2026-59959 |
medium | 4.8 | 0.0013 | 2026-10-29 | SAIL is a cross-platform library for loading and saving images with support for animation, | |
CVE-2026-115402 |
medium | 5.7 | 0.0012 | 2026-10-29 | OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denia | |
CVE-2026-112356 |
medium | 5.1 | 0.0025 | 2026-10-29 | GFI KerioConnect (Kerio Connect) before 10.0.9 Patch 2 contains a cross-site scripting vul | |
CVE-2026-118029 |
medium | 5.9 | 0.0017 | 2026-10-29 | Unverified ownership of the default query result location in the Athena module in AWS SDK | |
CVE-2026-50539 |
medium | 6.5 | 0.0037 | 2026-10-29 | Xibo is an open source digital signage platform with a web content management system and W | |
CVE-2026-50542 |
medium | 5.4 | 0.0025 | 2026-10-29 | Xibo is an open source digital signage platform with a web content management system and W | |
CVE-2026-50543 |
medium | 4.3 | 0.0022 | 2026-10-29 | Xibo is an open source digital signage platform with a web content management system and W | |
CVE-2026-67187 |
medium | 5.1 | 0.0017 | 2026-10-29 | Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validati | |
CVE-2026-103390 |
medium | 5.3 | 0.0043 | 2026-10-29 | An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Sessio | |
CVE-2026-103391 |
medium | 5.3 | 0.0021 | 2026-10-29 | An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Net | |
CVE-2026-103392 |
medium | 4.8 | 0.0022 | 2026-10-29 | An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Sess | |
CVE-2026-103393 |
medium | 4.3 | 0.0015 | 2026-10-29 | An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session | |
CVE-2026-103400 |
medium | 5.5 | 0.0018 | 2026-10-29 | An Improper Neutralization of Special Elements in Output Used by a Downstream Component (' | |
CVE-2026-103404 |
medium | 6.8 | 0.0023 | 2026-10-29 | An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager i | |
CVE-2026-103405 |
medium | 5.8 | 0.0023 | 2026-10-29 | An Improper Neutralization of Special Elements in Output Used by a Downstream Component (' | |
CVE-2026-118581 |
medium | 6.9 | 0.0019 | 2026-10-29 | A BSON encoding component of the MongoDB Java Driver does not verify that an externally su | |
CVE-2026-118601 |
medium | 6.3 | 0.0027 | 2026-10-29 | Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulne | |
CVE-2026-118604 |
medium | 6.8 | 0.0030 | 2026-10-29 | Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulner | |
CVE-2026-118607 |
medium | 6.8 | 0.0087 | 2026-10-29 | Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physica | |
CVE-2026-118609 |
medium | 6.8 | 0.0030 | 2026-10-29 | Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Ex | |
CVE-2026-118611 |
medium | 6.8 | 0.0030 | 2026-10-29 | Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Exec | |
CVE-2026-82962 |
medium | 6.5 | 0.0026 | 2026-10-29 | ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet heade | |
CVE-2026-88858 |
medium | 6.5 | 0.0034 | 2026-10-29 | A user with the Viewer role in Grafana can crash the server by submitting a crafted server | |
CVE-2026-93524 |
medium | 6.9 | 0.0018 | 2026-10-29 | A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 2 | |
CVE-2026-93536 |
medium | 5.3 | 0.0017 | 2026-10-29 | A use after free caused by missing lifecycle management of gesture sprites in GestureBuild | |
CVE-2026-105613 |
medium | 4.7 | 0.0018 | 2026-10-29 | PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This v | |
CVE-2026-105614 |
medium | 4.7 | 0.0018 | 2026-10-29 | PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension | |
CVE-2026-105616 |
medium | 5.7 | 0.0019 | 2026-10-29 | PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not memb | |
CVE-2026-105617 |
medium | 6.5 | 0.0022 | 2026-10-29 | PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role c | |
CVE-2026-105618 |
medium | 5.7 | 0.0018 | 2026-10-29 | PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inherita | |
CVE-2026-105619 |
medium | 4.8 | 0.0015 | 2026-10-29 | PostgreSQL Anonymizer doesn't mask data accessed thru a security_invoker view. The problem | |
CVE-2026-105620 |
medium | 6.5 | 0.0020 | 2026-10-29 | PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a rule. The problem is | |
CVE-2026-110181 |
medium | 6.5 | 0.0027 | 2026-10-29 | PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined | |
CVE-2026-110182 |
medium | 4.3 | 0.0018 | 2026-10-29 | PostgreSQL Anonymizer contains a vulnerability related to the anon.partial() and anon.part | |
CVE-2026-110183 |
medium | 4.3 | 0.0016 | 2026-10-29 | PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics pe | |
CVE-2026-118243 |
medium | 5.3 | 0.0035 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highc | |
CVE-2026-118247 |
medium | 6.9 | 0.0036 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until Dashboards 4 | |
CVE-2026-118248 |
medium | 6.9 | 0.0028 | 2026-10-29 | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highc | |
CVE-2026-58458 |
medium | 6.9 | 0.0025 | 2026-10-29 | Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corrupti |