Browse All CVEs
10,519 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-113683 |
medium | 5.1 | 0.0036 | 2026-10-29 | VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scri | |
CVE-2026-113649 |
medium | 6.5 | 0.0030 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the i | |
CVE-2026-113650 |
medium | 5.3 | 0.0048 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. In sanitize-html 2.18.0 | |
CVE-2026-113654 |
medium | 5.3 | 0.0043 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provi | |
CVE-2026-113507 |
medium | 5.5 | 0.0047 | 2026-10-29 | A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function Ge | |
CVE-2026-113659 |
medium | 6.1 | 0.0034 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an una | |
CVE-2026-113664 |
medium | 5.3 | 0.0049 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the i | |
CVE-2026-113669 |
medium | 5.3 | 0.0042 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of Apos | |
CVE-2026-113712 |
medium | 4.8 | 0.0046 | 2026-10-29 | Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cros | |
CVE-2026-113713 |
medium | 4.4 | 0.0020 | 2026-10-29 | virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until | |
CVE-2026-107692 |
medium | 4.8 | 0.0014 | 2026-10-29 | The War Thunder game client transmits its authentication bearer token (auth_jwt) in the ve | |
CVE-2026-113716 |
medium | 4.5 | 0.0014 | 2026-10-29 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, | |
CVE-2026-113719 |
medium | 4.5 | 0.0020 | 2026-10-29 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, | |
CVE-2026-113720 |
medium | 4.4 | 0.0013 | 2026-10-29 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, | |
CVE-2026-113721 |
medium | 4.5 | 0.0014 | 2026-10-29 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, | |
CVE-2026-113724 |
medium | 4.5 | 0.0020 | 2026-10-29 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, | |
CVE-2026-113866 |
medium | 5.9 | 0.0037 | 2026-10-29 | When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the do | |
CVE-2026-113868 |
medium | 5.3 | 0.0043 | 2026-10-29 | When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether | |
CVE-2026-113869 |
medium | 5.4 | 0.0033 | 2026-10-29 | When Thunderbird asked for a security device password (for example a smartcard PIN or the | |
CVE-2012-20003 |
medium | 5.1 | 0.0027 | 2026-10-29 | Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting | |
CVE-2012-20004 |
medium | 5.1 | 0.0027 | 2026-10-29 | K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnera | |
CVE-2012-20005 |
medium | 5.1 | 0.0021 | 2026-10-29 | SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vul | |
CVE-2014-125131 |
medium | 5.1 | 0.0026 | 2026-10-29 | DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows un | |
CVE-2014-125132 |
medium | 5.1 | 0.0021 | 2026-10-29 | Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting v | |
CVE-2016-20102 |
medium | 5.1 | 0.0026 | 2026-10-29 | JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allo | |
CVE-2026-101103 |
medium | 5.5 | 0.0012 | 2026-10-29 | The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buff | |
CVE-2026-103672 |
medium | 6.9 | 0.0013 | 2026-10-29 | The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without e | |
CVE-2026-105960 |
medium | 6.8 | 0.0011 | 2026-10-29 | PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-recor | |
CVE-2026-109576 |
medium | 6.8 | 0.0012 | 2026-10-29 | The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loo | |
CVE-2026-110322 |
medium | 6.8 | 0.0011 | 2026-10-29 | The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned obj | |
CVE-2025-60475 |
medium | 5.5 | 0.0021 | 2026-10-29 | A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Pro | |
CVE-2025-60494 |
medium | 5.5 | 0.0020 | 2026-10-29 | A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_prop | |
CVE-2025-60496 |
medium | 5.5 | 0.0040 | 2026-10-29 | A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c | |
CVE-2026-101359 |
medium | 5.3 | 0.0031 | 2026-10-29 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are | |
CVE-2026-101381 |
medium | 5.4 | 0.0022 | 2026-10-29 | Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are | |
CVE-2026-101382 |
medium | 4.2 | 0.0018 | 2026-10-29 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are | |
CVE-2026-101383 |
medium | 5.4 | 0.0023 | 2026-10-29 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are | |
CVE-2026-101384 |
medium | 5.0 | 0.0028 | 2026-10-29 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are | |
CVE-2026-101385 |
medium | 4.9 | 0.0031 | 2026-10-29 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are | |
CVE-2026-101386 |
medium | 4.2 | 0.0018 | 2026-10-29 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are | |
CVE-2026-101389 |
medium | 5.9 | 0.0040 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101394 |
medium | 5.3 | 0.0031 | 2026-10-29 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Mark | |
CVE-2026-101399 |
medium | 5.3 | 0.0043 | 2026-10-29 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Mark | |
CVE-2026-101403 |
medium | 5.9 | 0.0025 | 2026-10-29 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Emai | |
CVE-2026-101423 |
medium | 4.3 | 0.0026 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101430 |
medium | 6.2 | 0.0017 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101433 |
medium | 5.3 | 0.0031 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101486 |
medium | 5.4 | 0.0021 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101487 |
medium | 5.4 | 0.0021 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101488 |
medium | 6.5 | 0.0036 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo |