Browse All CVEs
10,499 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-116169 |
medium | 5.1 | 0.0021 | 2026-10-29 | SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that | |
CVE-2026-116170 |
medium | 6.9 | 0.0036 | 2026-10-29 | SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holde | |
CVE-2026-116171 |
medium | 5.9 | 0.0048 | 2026-10-29 | SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensit | |
CVE-2026-116182 |
medium | 5.3 | 0.0020 | 2026-10-29 | phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF exp | |
CVE-2026-116185 |
medium | 5.3 | 0.0019 | 2026-10-29 | OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows a | |
CVE-2026-116187 |
medium | 6.1 | 0.0014 | 2026-10-29 | Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve | |
CVE-2026-116188 |
medium | 6.9 | 0.0025 | 2026-10-29 | rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in | |
CVE-2026-116190 |
medium | 6.3 | 0.0019 | 2026-10-29 | rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the | |
CVE-2026-116193 |
medium | 6.9 | 0.0025 | 2026-10-29 | Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve | |
CVE-2026-116196 |
medium | 6.0 | 0.0006 | 2026-10-29 | Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that | |
CVE-2026-116198 |
medium | 5.3 | 0.0008 | 2026-10-29 | Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController: | |
CVE-2026-116202 |
medium | 5.1 | 0.0014 | 2026-10-29 | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low- | |
CVE-2026-116203 |
medium | 5.3 | 0.0017 | 2026-10-29 | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertag | |
CVE-2026-116205 |
medium | 6.9 | 0.0051 | 2026-10-29 | YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability | |
CVE-2026-116206 |
medium | 5.3 | 0.0016 | 2026-10-29 | YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that | |
CVE-2026-116056 |
medium | 5.3 | 0.0036 | 2026-10-29 | A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function request | |
CVE-2026-116058 |
medium | 5.3 | 0.0038 | 2026-10-29 | A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.692. Affected by this issue | |
CVE-2026-116060 |
medium | 6.9 | 0.0027 | 2026-10-29 | A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This af | |
CVE-2026-116061 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vu | |
CVE-2026-116062 |
medium | 5.5 | 0.0027 | 2026-10-29 | A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Th | |
CVE-2026-116063 |
medium | 5.1 | 0.0025 | 2026-10-29 | A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_ | |
CVE-2026-114214 |
medium | 6.0 | 0.0025 | 2026-10-29 | Incorrect Authorization vulnerability in ash-project ash allows a client to read destinati | |
CVE-2026-115627 |
medium | 6.0 | 0.0025 | 2026-10-29 | Incorrect Authorization vulnerability in ash-project ash_postgres allows a user to load de | |
CVE-2026-115635 |
medium | 6.0 | 0.0025 | 2026-10-29 | Incorrect Authorization vulnerability in ash-project ash_postgres allows a user to read an | |
CVE-2026-116094 |
medium | 5.5 | 0.0036 | 2026-10-29 | A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_fi | |
CVE-2026-116095 |
medium | 5.5 | 0.0052 | 2026-10-29 | A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affecte | |
CVE-2026-116096 |
medium | 4.8 | 0.0012 | 2026-10-29 | A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the functi | |
CVE-2026-116098 |
medium | 5.3 | 0.0025 | 2026-10-29 | A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affect | |
CVE-2026-116102 |
medium | 5.3 | 0.0091 | 2026-10-29 | A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted elemen | |
CVE-2026-116105 |
medium | 6.3 | 0.0027 | 2026-10-29 | A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown f | |
CVE-2026-116106 |
medium | 6.9 | 0.0035 | 2026-10-29 | 1 PoC | A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by |
CVE-2026-116108 |
medium | 5.3 | 0.0026 | 2026-10-29 | A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part | |
CVE-2026-116110 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows. This issue affe | |
CVE-2026-116112 |
medium | 5.5 | 0.0025 | 2026-10-29 | A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc25842 | |
CVE-2026-116113 |
medium | 5.3 | 0.0020 | 2026-10-29 | A security flaw has been discovered in GouGuOA up to 6.1.2. The impacted element is the fu | |
CVE-2026-116114 |
medium | 6.3 | 0.0019 | 2026-10-29 | A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unkno | |
CVE-2026-116117 |
medium | 6.9 | 0.0050 | 2026-10-29 | A flaw has been found in halo-dev halo up to 2.27.0-beta.1. Affected by this vulnerability | |
CVE-2026-116119 |
medium | 5.1 | 0.0014 | 2026-10-29 | A vulnerability was found in NocoDB up to 2026.08.0. This affects an unknown part of the f | |
CVE-2026-116120 |
medium | 6.3 | 0.0028 | 2026-10-29 | A vulnerability was determined in NocoDB up to 2026.07.0. This vulnerability affects the f | |
CVE-2026-116121 |
medium | 6.3 | 0.0023 | 2026-10-29 | A vulnerability was identified in NocoDB up to 2026.08.0. This issue affects some unknown | |
CVE-2026-116122 |
medium | 6.3 | 0.0044 | 2026-10-29 | A security flaw has been discovered in NocoDB up to 2026.07.0. Impacted is the function Au | |
CVE-2026-116123 |
medium | 6.3 | 0.0051 | 2026-10-29 | A weakness has been identified in NocoDB up to 2026.07.0. The affected element is the func | |
CVE-2026-103298 |
medium | 5.3 | 0.0018 | 2026-10-29 | The CCAvenue Payment Gateway for WooCommerce WordPress plugin through 3.1 does not verify | |
CVE-2026-103299 |
medium | 5.3 | 0.0018 | 2026-10-29 | The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared secret is con | |
CVE-2026-103300 |
medium | 5.3 | 0.0011 | 2026-10-29 | The Eurobank WooCommerce Payment Gateway WordPress plugin through 2.1.1 does not verify th | |
CVE-2026-103306 |
medium | 5.3 | 0.0018 | 2026-10-29 | The Online Payments with iK Pay Gateway WordPress plugin before 3.0.4 does not properly ve | |
CVE-2026-103319 |
medium | 5.3 | 0.0018 | 2026-10-29 | The OPay Payment Gateway for WooCommerce WordPress plugin through 2.5.5 does not properly | |
CVE-2026-103381 |
medium | 6.5 | 0.0016 | 2026-10-29 | The Mintpay for WooCommerce WordPress plugin through 2.2.3 does not verify the authenticit | |
CVE-2026-111974 |
medium | 5.3 | 0.0019 | 2026-10-29 | The GiveWP WordPress plugin before 4.19.0.1 does not restrict the currency of a donation t | |
CVE-2026-116124 |
medium | 5.3 | 0.0043 | 2026-10-29 | A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted ele |