Browse All CVEs
10,498 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-115970 |
medium | 5.5 | 0.0030 | 2026-10-29 | A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function | |
CVE-2026-115971 |
medium | 6.9 | 0.0037 | 2026-10-29 | A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.conca | |
CVE-2026-115972 |
medium | 6.9 | 0.0028 | 2026-10-29 | A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this | |
CVE-2026-115973 |
medium | 6.9 | 0.0028 | 2026-10-29 | A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue | |
CVE-2026-115981 |
medium | 4.8 | 0.0025 | 2026-10-29 | A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulner | |
CVE-2026-115996 |
medium | 6.3 | 0.0023 | 2026-10-29 | A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15. | |
CVE-2026-115999 |
medium | 6.9 | 0.0026 | 2026-10-29 | A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bd | |
CVE-2026-116000 |
medium | 6.9 | 0.0029 | 2026-10-29 | A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability af | |
CVE-2026-116006 |
medium | 5.5 | 0.0083 | 2026-10-29 | A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affe | |
CVE-2026-116007 |
medium | 6.3 | 0.0037 | 2026-10-29 | A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The impacted el | |
CVE-2026-110285 |
medium | 5.3 | 0.0020 | 2026-10-29 | The WP Stripe Checkout WordPress plugin before 1.2.2.62 does not verify the Stripe webhook | |
CVE-2026-111976 |
medium | 5.3 | 0.0020 | 2026-10-29 | The GiveWP WordPress plugin before 4.19.0.1 does not perform any status or capability che | |
CVE-2026-111978 |
medium | 6.0 | 0.0028 | 2026-10-29 | The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied fi | |
CVE-2026-111979 |
medium | 6.8 | 0.0024 | 2026-10-29 | The GiveWP WordPress plugin before 4.19.0.1 does not properly sanitise and escape one of | |
CVE-2026-111980 |
medium | 5.5 | 0.0018 | 2026-10-29 | The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a pag | |
CVE-2026-114740 |
medium | 4.9 | 0.0025 | 2026-10-29 | The WPVR WordPress plugin before 9.1.3 does not correctly check user capabilities when cr | |
CVE-2026-94295 |
medium | 5.3 | 0.0018 | 2026-10-29 | The Chikkili- Google Pay India for Woocommerce WordPress plugin through 1.0.6 does not ver | |
CVE-2026-116046 |
medium | 4.8 | 0.0014 | 2026-10-29 | A flaw has been found in eventcatalog sdk up to 2.29.0. This vulnerability affects the fun | |
CVE-2026-116048 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d20827828 | |
CVE-2026-116049 |
medium | 6.9 | 0.0025 | 2026-10-29 | A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e3 | |
CVE-2026-116050 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d2082 | |
CVE-2026-116069 |
medium | 6.9 | 0.0026 | 2026-10-29 | NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerabilit | |
CVE-2026-116070 |
medium | 6.9 | 0.0054 | 2026-10-29 | Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui | |
CVE-2026-116072 |
medium | 5.3 | 0.0012 | 2026-10-29 | Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerabilit | |
CVE-2026-116073 |
medium | 6.9 | 0.0032 | 2026-10-29 | Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFrom | |
CVE-2026-116136 |
medium | 6.0 | 0.0020 | 2026-10-29 | ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in File | |
CVE-2026-116137 |
medium | 6.3 | 0.0026 | 2026-10-29 | adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers t | |
CVE-2026-116052 |
medium | 5.3 | 0.0021 | 2026-10-29 | A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected el | |
CVE-2026-116053 |
medium | 4.8 | 0.0069 | 2026-10-29 | A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is | |
CVE-2026-116139 |
medium | 5.1 | 0.0023 | 2026-10-29 | WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site scripting vulnerability that | |
CVE-2026-116140 |
medium | 4.8 | 0.0013 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocatio | |
CVE-2026-116141 |
medium | 6.9 | 0.0033 | 2026-10-29 | ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder tha | |
CVE-2026-116142 |
medium | 4.8 | 0.0012 | 2026-10-29 | ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows att | |
CVE-2026-116143 |
medium | 4.8 | 0.0012 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, P | |
CVE-2026-116144 |
medium | 4.8 | 0.0012 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in th | |
CVE-2026-116146 |
medium | 6.3 | 0.0027 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL dec | |
CVE-2026-116147 |
medium | 6.3 | 0.0027 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer dereference i | |
CVE-2026-116148 |
medium | 4.8 | 0.0014 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability i | |
CVE-2026-116151 |
medium | 6.3 | 0.0027 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG enc | |
CVE-2026-116152 |
medium | 6.9 | 0.0031 | 2026-10-29 | ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that f | |
CVE-2026-116154 |
medium | 6.9 | 0.0030 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML par | |
CVE-2026-116155 |
medium | 6.9 | 0.0030 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handlin | |
CVE-2026-116156 |
medium | 4.8 | 0.0011 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a mi | |
CVE-2026-116157 |
medium | 4.8 | 0.0011 | 2026-10-29 | ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails | |
CVE-2026-116159 |
medium | 4.8 | 0.0011 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handlin | |
CVE-2026-116160 |
medium | 4.8 | 0.0012 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow | |
CVE-2026-116161 |
medium | 6.0 | 0.0029 | 2026-10-29 | Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclo | |
CVE-2026-116164 |
medium | 6.3 | 0.0034 | 2026-10-29 | Parse Server before 8.6.100 and 9.0.0 before 9.10.4-alpha.3 does not reject reserved inter | |
CVE-2026-116168 |
medium | 6.9 | 0.0019 | 2026-10-29 | SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP asset tool because | |
CVE-2026-116169 |
medium | 5.1 | 0.0021 | 2026-10-29 | SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that |