Browse All CVEs
10,500 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-116124 |
medium | 5.3 | 0.0043 | 2026-10-29 | A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted ele | |
CVE-2026-116223 |
medium | 6.9 | 0.0034 | 2026-10-29 | A flaw has been found in icret EasyImage up to 2.8.7. The impacted element is an unknown f | |
CVE-2026-116224 |
medium | 5.3 | 0.0023 | 2026-10-29 | A vulnerability has been found in fr0tt benotes up to 2.8.1. This affects the function get | |
CVE-2026-116227 |
medium | 4.8 | 0.0021 | 2026-10-29 | A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknow | |
CVE-2026-116228 |
medium | 4.8 | 0.0014 | 2026-10-29 | A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects th | |
CVE-2026-116229 |
medium | 5.1 | 0.0020 | 2026-10-29 | A vulnerability was determined in ffxiv-teamcraft FFXIV Teamcraft up to 11.4.31. Impacted | |
CVE-2026-116230 |
medium | 5.3 | 0.0027 | 2026-10-29 | A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The | |
CVE-2026-101259 |
medium | 5.3 | 0.0034 | 2026-10-29 | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel | |
CVE-2026-110376 |
medium | 4.3 | 0.0015 | 2026-10-29 | Missing Authorization vulnerability in VillaTheme DEPART depart-deposit-and-part-payment-f | |
CVE-2026-112828 |
medium | 4.3 | 0.0015 | 2026-10-29 | Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Inc | |
CVE-2026-113438 |
medium | 6.5 | 0.0024 | 2026-10-29 | Pleasanter provided fails to properly verify passwords in LDAP authentication when process | |
CVE-2026-115425 |
medium | 5.6 | 0.0029 | 2026-10-29 | Multiple cross site scripting (XSS) vulnerabilities affect OPNsense firewall vesrion 26.7. | |
CVE-2026-82943 |
medium | 6.5 | 0.0017 | 2026-10-29 | SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send | |
CVE-2026-82945 |
medium | 6.5 | 0.0017 | 2026-10-29 | SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where | |
CVE-2026-82946 |
medium | 6.5 | 0.0017 | 2026-10-29 | SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash | |
CVE-2026-95628 |
medium | 5.4 | 0.0034 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-95629 |
medium | 5.4 | 0.0034 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-95663 |
medium | 4.8 | 0.0024 | 2026-10-29 | Insufficient Session Expiration vulnerability in Apache Camel Keycloak component. This | |
CVE-2026-95664 |
medium | 5.4 | 0.0084 | 2026-10-29 | Improper Neutralization of Special Elements used in an Expression Language Statement ('Exp | |
CVE-2026-103377 |
medium | 5.1 | 0.0041 | 2026-10-29 | A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the web applic | |
CVE-2026-110377 |
medium | 5.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builde | |
CVE-2026-112250 |
medium | 4.4 | 0.0017 | 2026-10-29 | A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. U | |
CVE-2026-112865 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-114709 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115602 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115613 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115614 |
medium | 5.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in Magepeople inc. Booking and Rental Manager booking- | |
CVE-2026-115949 |
medium | 6.5 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in WP Smart Widgets Better Post & Filter Widgets for E | |
CVE-2026-115958 |
medium | 5.3 | 0.0026 | 2026-10-29 | Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussi | |
CVE-2026-116253 |
medium | 6.9 | 0.0049 | 2026-10-29 | A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function | |
CVE-2026-116254 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was identified in rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c1 | |
CVE-2026-116255 |
medium | 6.9 | 0.0068 | 2026-10-29 | A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659 | |
CVE-2026-4316 |
medium | 5.1 | 0.0042 | 2026-10-29 | Reflected Cross-Site Scripting (XSS) in Gym Management Software IsMyGym by Zuinq Studio af | |
CVE-2026-97254 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-97255 |
medium | 5.3 | 0.0028 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in WProyal Royal Elementor | |
CVE-2026-97295 |
medium | 4.3 | 0.0012 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in David Lingren Media LIbrary Assistant m | |
CVE-2026-114707 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-114708 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115594 |
medium | 6.5 | 0.0032 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in David Lingren Media LIb | |
CVE-2026-115595 |
medium | 5.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in Supsystic Contact Form by Supsystic contact-form-by | |
CVE-2026-115950 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115951 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115953 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115954 |
medium | 5.4 | 0.0018 | 2026-10-29 | Missing Authorization vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Exploiting | |
CVE-2026-115955 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115956 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115959 |
medium | 5.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosqua | |
CVE-2026-115960 |
medium | 4.3 | 0.0020 | 2026-10-29 | Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosqua | |
CVE-2026-115961 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-116256 |
medium | 6.9 | 0.0035 | 2026-10-29 | A vulnerability was found in geesondog RhaPHP up to 7ae639ccf8dcb627faace096d030bd4cb4cfb9 |