Browse All CVEs
10,519 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-102787 |
medium | 5.3 | 0.0016 | 2026-10-29 | Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5 | |
CVE-2026-107145 |
medium | 6.3 | 0.0030 | 2026-10-29 | The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the se | |
CVE-2026-107146 |
medium | 6.3 | 0.0035 | 2026-10-29 | The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence aft | |
CVE-2026-107147 |
medium | 6.3 | 0.0039 | 2026-10-29 | The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypa | |
CVE-2026-111548 |
medium | 5.3 | 0.0034 | 2026-10-29 | A stack-based buffer overflow vulnerability exists in the web management interface of affe | |
CVE-2026-116873 |
medium | 6.9 | 0.0019 | 2026-10-29 | Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability | |
CVE-2026-116874 |
medium | 5.3 | 0.0017 | 2026-10-29 | SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulner | |
CVE-2026-116875 |
medium | 5.3 | 0.0017 | 2026-10-29 | SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulner | |
CVE-2026-116879 |
medium | 6.9 | 0.0021 | 2026-10-29 | Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability | |
CVE-2026-116881 |
medium | 5.3 | 0.0015 | 2026-10-29 | Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability t | |
CVE-2026-116882 |
medium | 4.8 | 0.0015 | 2026-10-29 | Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerab | |
CVE-2026-116883 |
medium | 4.8 | 0.0015 | 2026-10-29 | Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerab | |
CVE-2026-116884 |
medium | 5.3 | 0.0016 | 2026-10-29 | SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerabi | |
CVE-2026-116885 |
medium | 5.3 | 0.0018 | 2026-10-29 | Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulne | |
CVE-2026-116886 |
medium | 5.3 | 0.0014 | 2026-10-29 | Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerab | |
CVE-2026-116887 |
medium | 5.3 | 0.0014 | 2026-10-29 | Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerab | |
CVE-2026-116888 |
medium | 4.8 | 0.0015 | 2026-10-29 | SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerabi | |
CVE-2026-116889 |
medium | 5.3 | 0.0016 | 2026-10-29 | SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerabi | |
CVE-2026-116890 |
medium | 6.9 | 0.0019 | 2026-10-29 | Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability | |
CVE-2026-116891 |
medium | 5.1 | 0.0017 | 2026-10-29 | SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulner | |
CVE-2026-116892 |
medium | 5.3 | 0.0021 | 2026-10-29 | SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulner | |
CVE-2026-116893 |
medium | 6.1 | 0.0025 | 2026-10-29 | REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rex_api_pa | |
CVE-2026-116895 |
medium | 5.1 | 0.0010 | 2026-10-29 | REDAXO before 5.21.5 contains a cross-site request forgery vulnerability because the backe | |
CVE-2026-116900 |
medium | 5.1 | 0.0014 | 2026-10-29 | REDAXO before 5.21.4 contains a stored cross-site scripting vulnerability that allows cont | |
CVE-2026-117530 |
medium | 6.7 | 0.0011 | 2026-10-29 | In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete val | |
CVE-2026-117534 |
medium | 5.1 | 0.0010 | 2026-10-29 | REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the structure/ | |
CVE-2026-117535 |
medium | 5.1 | 0.0020 | 2026-10-29 | REDAXO before 5.21.3 contains a reflected cross-site scripting vulnerability in the backen | |
CVE-2026-117539 |
medium | 5.1 | 0.0018 | 2026-10-29 | darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass | |
CVE-2026-117541 |
medium | 6.9 | 0.0031 | 2026-10-29 | svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception vulnerability that a | |
CVE-2026-105323 |
medium | 6.1 | 0.0018 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-10752 |
medium | 4.8 | 0.0025 | 2026-10-29 | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to authorization b | |
CVE-2026-113644 |
medium | 5.5 | 0.0018 | 2026-10-29 | In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the p | |
CVE-2026-115408 |
medium | 5.5 | 0.0008 | 2026-10-29 | In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8`, the ML- | |
CVE-2026-41022 |
medium | 5.9 | 0.0008 | 2026-10-29 | Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A networ | |
CVE-2026-56084 |
medium | 5.8 | 0.0021 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 relea | |
CVE-2026-90728 |
medium | 6.3 | 0.0010 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 relea | |
CVE-2026-90729 |
medium | 6.7 | 0.0022 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 relea | |
CVE-2026-90730 |
medium | 6.5 | 0.0020 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 relea | |
CVE-2026-90731 |
medium | 4.9 | 0.0026 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 relea | |
CVE-2026-90732 |
medium | 4.9 | 0.0026 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 | |
CVE-2026-114409 |
medium | 5.7 | 0.0011 | 2026-10-29 | Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tok | |
CVE-2026-15586 |
medium | 5.3 | 0.0021 | 2026-10-29 | Improper restriction of excessive authentication attempts vulnerability in İdvlabs Softwar | |
CVE-2026-107067 |
medium | 6.2 | 0.0013 | 2026-10-29 | An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain | |
CVE-2026-10537 |
medium | 6.9 | 0.0029 | 2026-10-29 | A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Contr | |
CVE-2026-117503 |
medium | 6.9 | 0.0071 | 2026-10-29 | A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown fu | |
CVE-2026-117504 |
medium | 6.9 | 0.0055 | 2026-10-29 | A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is t | |
CVE-2026-117554 |
medium | 5.3 | 0.0029 | 2026-10-29 | Admidio before 5.0.17 contains an improper access control vulnerability that allows authen | |
CVE-2026-117555 |
medium | 6.9 | 0.0013 | 2026-10-29 | CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() fun | |
CVE-2026-117556 |
medium | 5.3 | 0.0033 | 2026-10-29 | zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in | |
CVE-2026-117557 |
medium | 6.9 | 0.0013 | 2026-10-29 | SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerabili |