Browse All CVEs
10,520 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-117557 |
medium | 6.9 | 0.0013 | 2026-10-29 | SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerabili | |
CVE-2026-117562 |
medium | 6.9 | 0.0032 | 2026-10-29 | rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unau | |
CVE-2026-117563 |
medium | 5.3 | 0.0022 | 2026-10-29 | MrDoc through 1.1.1 contains a broken access control vulnerability in the manage_doc_share | |
CVE-2026-117565 |
medium | 6.9 | 0.0039 | 2026-10-29 | Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability | |
CVE-2026-117566 |
medium | 6.9 | 0.0035 | 2026-10-29 | EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in ap | |
CVE-2026-117570 |
medium | 4.8 | 0.0024 | 2026-10-29 | Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulner | |
CVE-2026-12669 |
medium | 4.3 | 0.0016 | 2026-10-29 | IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when se | |
CVE-2026-12670 |
medium | 6.5 | 0.0021 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service through a specia | |
CVE-2026-12727 |
medium | 4.3 | 0.0022 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause potential process instability due to | |
CVE-2026-14511 |
medium | 6.5 | 0.0033 | 2026-10-29 | IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of serv | |
CVE-2026-15661 |
medium | 5.3 | 0.0024 | 2026-10-29 | IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log mes | |
CVE-2025-55654 |
medium | 5.5 | 0.0024 | 2026-10-29 | A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GP | |
CVE-2025-55667 |
medium | 5.5 | 0.0025 | 2026-10-29 | A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Bo | |
CVE-2025-60480 |
medium | 5.5 | 0.0019 | 2026-10-29 | A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c | |
CVE-2026-11319 |
medium | 6.9 | 0.0017 | 2026-10-29 | TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnera | |
CVE-2026-3161 |
medium | 5.9 | 0.0017 | 2026-10-29 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorith | |
CVE-2026-3628 |
medium | 5.3 | 0.0027 | 2026-10-29 | IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema sug | |
CVE-2026-55644 |
medium | 5.1 | 0.0038 | 2026-10-29 | Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26. | |
CVE-2025-60482 |
medium | 5.5 | 0.0016 | 2026-10-29 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GP | |
CVE-2026-112249 |
medium | 4.8 | 0.0040 | 2026-10-29 | A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function | |
CVE-2026-112259 |
medium | 5.5 | 0.0015 | 2026-10-29 | A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute | |
CVE-2026-112778 |
medium | 6.4 | 0.0020 | 2026-10-29 | Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress | |
CVE-2026-112391 |
medium | 6.3 | 0.0058 | 2026-10-29 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value( | |
CVE-2026-112394 |
medium | 6.3 | 0.0056 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders c | |
CVE-2026-112395 |
medium | 6.5 | 0.0051 | 2026-10-29 | Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder c | |
CVE-2026-112401 |
medium | 6.9 | 0.0065 | 2026-10-29 | Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic cop | |
CVE-2026-112891 |
medium | 6.9 | 0.0055 | 2026-10-29 | Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic cop | |
CVE-2026-112898 |
medium | 6.9 | 0.0034 | 2026-10-29 | Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitial | |
CVE-2026-112901 |
medium | 6.9 | 0.0053 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnera | |
CVE-2025-36061 |
medium | 6.5 | 0.0032 | 2026-10-29 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM S | |
CVE-2025-36069 |
medium | 5.5 | 0.0015 | 2026-10-29 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a lo | |
CVE-2025-36252 |
medium | 6.3 | 0.0020 | 2026-10-29 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Ta | |
CVE-2026-28850 |
medium | 5.5 | 0.0014 | 2026-10-29 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-112783 |
medium | 5.3 | 0.0026 | 2026-10-29 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/deleteActivi | |
CVE-2026-113349 |
medium | 5.3 | 0.0026 | 2026-10-29 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in CalendarUI::onEdi | |
CVE-2026-113583 |
medium | 5.3 | 0.0039 | 2026-10-29 | Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability | |
CVE-2026-111761 |
medium | 5.8 | 0.0059 | 2026-10-29 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.F | |
CVE-2026-111762 |
medium | 5.7 | 0.0017 | 2026-10-29 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.F | |
CVE-2026-112906 |
medium | 4.7 | 0.0017 | 2026-10-29 | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileL | |
CVE-2026-112909 |
medium | 6.1 | 0.0022 | 2026-10-29 | filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can | |
CVE-2026-112911 |
medium | 6.3 | 0.0015 | 2026-10-29 | filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, StrictSo | |
CVE-2026-112934 |
medium | 6.1 | 0.0023 | 2026-10-29 | filelock is a platform-independent file lock for Python. From 4.0.0 until 4.2.1, SoftReadW | |
CVE-2026-112935 |
medium | 4.7 | 0.0013 | 2026-10-29 | filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFile | |
CVE-2026-112949 |
medium | 4.7 | 0.0034 | 2026-10-29 | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1 | |
CVE-2026-112950 |
medium | 5.9 | 0.0054 | 2026-10-29 | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 4.1 | |
CVE-2026-112954 |
medium | 5.3 | 0.0044 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a publ | |
CVE-2026-112955 |
medium | 6.5 | 0.0053 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the i | |
CVE-2026-113595 |
medium | 5.3 | 0.0032 | 2026-10-29 | Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.change | |
CVE-2026-113600 |
medium | 5.3 | 0.0034 | 2026-10-29 | Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that | |
CVE-2026-113601 |
medium | 5.3 | 0.0031 | 2026-10-29 | Memos before 0.27.0 contains a missing authorization vulnerability in the ActivityService |