Browse All CVEs
10,517 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-116398 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-116400 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-116408 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-116463 |
medium | 5.3 | 0.0023 | 2026-10-29 | A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the functi | |
CVE-2026-33520 |
medium | 6.1 | 0.0025 | 2026-10-29 | There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions | |
CVE-2026-33522 |
medium | 5.3 | 0.0029 | 2026-10-29 | Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to | |
CVE-2026-50095 |
medium | 6.1 | 0.0025 | 2026-10-29 | There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Win | |
CVE-2026-50096 |
medium | 6.1 | 0.0025 | 2026-10-29 | There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions | |
CVE-2026-72752 |
medium | 6.5 | 0.0024 | 2026-10-29 | Routinator runs out of memory when the JSON output is requested many times concurrently. T | |
CVE-2026-72757 |
medium | 5.3 | 0.0036 | 2026-10-29 | Routinator runs out of open connections on the HTTP server when many connections are opene | |
CVE-2026-81509 |
medium | 6.1 | 0.0032 | 2026-10-29 | nforwardauth is a forward auth service that allows the use of a single authentication midd | |
CVE-2026-104592 |
medium | 6.5 | 0.0027 | 2026-10-29 | libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decode | |
CVE-2026-116467 |
medium | 6.9 | 0.0064 | 2026-10-29 | A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vu | |
CVE-2026-116476 |
medium | 5.3 | 0.0020 | 2026-10-29 | A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected | |
CVE-2026-116631 |
medium | 5.4 | 0.0021 | 2026-10-29 | A malicious web page could open a tel link in a window that was showing a different websit | |
CVE-2026-116632 |
medium | 5.4 | 0.0021 | 2026-10-29 | A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iO | |
CVE-2014-125135 |
medium | 6.9 | 0.0048 | 2026-10-29 | A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknow | |
CVE-2026-115927 |
medium | 5.3 | 0.0038 | 2026-10-29 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tor | |
CVE-2026-116477 |
medium | 5.3 | 0.0032 | 2026-10-29 | A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. | |
CVE-2026-116478 |
medium | 6.9 | 0.0043 | 2026-10-29 | A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function C | |
CVE-2026-116479 |
medium | 5.3 | 0.0032 | 2026-10-29 | A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function | |
CVE-2026-57184 |
medium | 6.3 | 0.0056 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-57193 |
medium | 6.9 | 0.0196 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-65625 |
medium | 5.9 | 0.0011 | 2026-10-29 | The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentica | |
CVE-2026-65626 |
medium | 5.9 | 0.0009 | 2026-10-29 | The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbach | |
CVE-2026-65627 |
medium | 6.9 | 0.0025 | 2026-10-29 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosa | |
CVE-2026-65628 |
medium | 5.9 | 0.0014 | 2026-10-29 | jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH s | |
CVE-2026-65630 |
medium | 5.9 | 0.0014 | 2026-10-29 | Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long- | |
CVE-2026-65631 |
medium | 6.9 | 0.0024 | 2026-10-29 | Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacke | |
CVE-2026-65632 |
medium | 5.1 | 0.0009 | 2026-10-29 | The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-c | |
CVE-2026-70380 |
medium | 6.9 | 0.0031 | 2026-10-29 | A denial-of-service vulnerability has been identified in the Miracast over Infrastructure | |
CVE-2026-70381 |
medium | 6.9 | 0.0026 | 2026-10-29 | An access-control vulnerability has been identified in the web server configuration. Some | |
CVE-2026-70382 |
medium | 5.1 | 0.0025 | 2026-10-29 | Some externally supplied values stored by the device may be rendered in the web interface | |
CVE-2026-112415 |
medium | 6.5 | 0.0055 | 2026-10-29 | An out-of-bounds write was addressed with improved input validation. This issue is fixed i | |
CVE-2026-112455 |
medium | 5.5 | 0.0016 | 2026-10-29 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-112471 |
medium | 4.3 | 0.0048 | 2026-10-29 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macO | |
CVE-2026-112506 |
medium | 5.5 | 0.0014 | 2026-10-29 | A permissions issue was addressed with improved validation. This issue is fixed in macOS G | |
CVE-2026-112533 |
medium | 5.5 | 0.0015 | 2026-10-29 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-112544 |
medium | 6.5 | 0.0038 | 2026-10-29 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi | |
CVE-2026-112547 |
medium | 5.5 | 0.0014 | 2026-10-29 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 | |
CVE-2026-112556 |
medium | 4.8 | 0.0037 | 2026-10-29 | A race condition was addressed with additional validation. This issue is fixed in macOS Go | |
CVE-2026-112559 |
medium | 5.5 | 0.0015 | 2026-10-29 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-112609 |
medium | 5.5 | 0.0013 | 2026-10-29 | This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS | |
CVE-2026-112614 |
medium | 6.5 | 0.0050 | 2026-10-29 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi | |
CVE-2026-112616 |
medium | 5.5 | 0.0015 | 2026-10-29 | An authorization issue was addressed with improved access control. This issue is fixed in | |
CVE-2026-112617 |
medium | 5.5 | 0.0018 | 2026-10-29 | An information disclosure issue was addressed with improved logic. This issue is fixed in | |
CVE-2026-112618 |
medium | 5.5 | 0.0014 | 2026-10-29 | An access issue was addressed with improved access restrictions. This issue is fixed in iO | |
CVE-2026-112629 |
medium | 6.5 | 0.0060 | 2026-10-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in | |
CVE-2026-112633 |
medium | 6.5 | 0.0055 | 2026-10-29 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi | |
CVE-2026-112634 |
medium | 6.5 | 0.0058 | 2026-10-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in |