Browse All CVEs
10,515 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-114707 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-114708 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115594 |
medium | 6.5 | 0.0032 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in David Lingren Media LIb | |
CVE-2026-115595 |
medium | 5.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in Supsystic Contact Form by Supsystic contact-form-by | |
CVE-2026-115950 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115951 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115953 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115954 |
medium | 5.4 | 0.0018 | 2026-10-29 | Missing Authorization vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Exploiting | |
CVE-2026-115955 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115956 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-115959 |
medium | 5.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosqua | |
CVE-2026-115960 |
medium | 4.3 | 0.0020 | 2026-10-29 | Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosqua | |
CVE-2026-115961 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-116256 |
medium | 6.9 | 0.0035 | 2026-10-29 | A vulnerability was found in geesondog RhaPHP up to 7ae639ccf8dcb627faace096d030bd4cb4cfb9 | |
CVE-2026-116257 |
medium | 5.5 | 0.0063 | 2026-10-29 | A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is th | |
CVE-2026-116258 |
medium | 5.3 | 0.0024 | 2026-10-29 | A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown pa | |
CVE-2026-116259 |
medium | 4.8 | 0.0014 | 2026-10-29 | A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability af | |
CVE-2026-105947 |
medium | 6.5 | 0.0039 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-115717 |
medium | 6.3 | 0.0031 | 2026-10-29 | Frappe Builder versions before 1.36.1 contain a server-side request forgery vulnerability | |
CVE-2026-115718 |
medium | 5.3 | 0.0031 | 2026-10-29 | Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability | |
CVE-2026-115720 |
medium | 5.3 | 0.0034 | 2026-10-29 | Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in build | |
CVE-2026-116260 |
medium | 5.5 | 0.0029 | 2026-10-29 | A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the fun | |
CVE-2026-116261 |
medium | 5.1 | 0.0020 | 2026-10-29 | A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is th | |
CVE-2026-116262 |
medium | 5.3 | 0.0032 | 2026-10-29 | A vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the | |
CVE-2026-110314 |
medium | 6.3 | 0.0038 | 2026-10-29 | Client-Side Enforcement of Server-Side Security vulnerability in the WebSocket connection | |
CVE-2026-113440 |
medium | 6.0 | 0.0031 | 2026-10-29 | Insufficiently Protected Credentials vulnerability in hackney in benoitc hackney allows a | |
CVE-2026-114216 |
medium | 6.3 | 0.0060 | 2026-10-29 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerabi | |
CVE-2026-115194 |
medium | 6.5 | 0.0044 | 2026-10-29 | A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset | |
CVE-2026-115195 |
medium | 6.5 | 0.0034 | 2026-10-29 | A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). | |
CVE-2026-115196 |
medium | 5.4 | 0.0032 | 2026-10-29 | An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit | |
CVE-2026-115700 |
medium | 6.9 | 0.0014 | 2026-10-29 | Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side | |
CVE-2026-116212 |
medium | 5.1 | 0.0017 | 2026-10-29 | Webasyst Framework through 4.4.0 contains a stored cross-site scripting vulnerability in t | |
CVE-2026-116213 |
medium | 6.9 | 0.0045 | 2026-10-29 | Webasyst Framework through 4.4.0 contains an arbitrary file read vulnerability in waArchiv | |
CVE-2026-116216 |
medium | 6.9 | 0.0027 | 2026-10-29 | MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Commen | |
CVE-2026-116217 |
medium | 5.3 | 0.0029 | 2026-10-29 | RosarioSIS before 12.9.2 contains a reflected cross-site scripting vulnerability in module | |
CVE-2026-116274 |
medium | 5.3 | 0.0020 | 2026-10-29 | A vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of t | |
CVE-2026-116275 |
medium | 5.3 | 0.0029 | 2026-10-29 | A vulnerability was found in AllenAI AllenNLP up to 2.10.1. This impacts the function Regi | |
CVE-2026-116280 |
medium | 5.1 | 0.0016 | 2026-10-29 | A vulnerability was determined in Kameleo up to 5.0.1.26. Affected is the function Interna | |
CVE-2026-116281 |
medium | 4.8 | 0.0010 | 2026-10-29 | A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability i | |
CVE-2026-116282 |
medium | 5.3 | 0.0034 | 2026-10-29 | A security flaw has been discovered in Kameleo up to 5.3.1. Affected by this issue is the | |
CVE-2026-116283 |
medium | 5.3 | 0.0028 | 2026-10-29 | A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of | |
CVE-2026-116487 |
medium | 5.1 | 0.0029 | 2026-10-29 | NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-o | |
CVE-2026-116516 |
medium | 6.5 | 0.0036 | 2026-10-29 | Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length | |
CVE-2026-110733 |
medium | 5.4 | 0.0032 | 2026-10-29 | Vulnerability in the SQL storage module of Apache SIS. When sorting a stream of features, | |
CVE-2026-116284 |
medium | 5.3 | 0.0033 | 2026-10-29 | A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affe | |
CVE-2026-116339 |
medium | 6.9 | 0.0048 | 2026-10-29 | A vulnerability was determined in iFlytek astron-agent up to 1.1.2. This affects an unknow | |
CVE-2026-116497 |
medium | 5.5 | 0.0014 | 2026-10-29 | A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTE | |
CVE-2026-3322 |
medium | 5.6 | 0.0018 | 2026-10-29 | Due to improper permission checks in Lobster_pro, attackers are able to interact with endp | |
CVE-2026-77054 |
medium | 6.9 | 0.0016 | 2026-10-29 | boneIO Black stores passwords, including the MQTT broker and web panel passwords, in clear | |
CVE-2026-77058 |
medium | 5.1 | 0.0026 | 2026-10-29 | boneIO Black is vulnerable to Cross-Site Request Forgery (CSRF) on all state-changing API |