Browse All CVEs
10,544 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-50106 |
medium | 6.5 | 0.0021 | 2026-10-29 | When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root | |
CVE-2026-96405 |
medium | 5.3 | 0.0025 | 2026-10-29 | NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal | |
CVE-2026-105923 |
medium | 4.0 | 0.0012 | 2026-10-29 | A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dere | |
CVE-2026-114242 |
medium | 5.5 | 0.0046 | 2026-10-29 | A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa10 | |
CVE-2026-66392 |
medium | 5.9 | 0.0021 | 2026-10-29 | Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS p | |
CVE-2026-114120 |
medium | 5.3 | 0.0029 | 2026-10-29 | SchedulePress before 5.3.5 contains a missing authorization vulnerability that allows auth | |
CVE-2026-114243 |
medium | 6.9 | 0.0033 | 2026-10-29 | A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5 | |
CVE-2026-114386 |
medium | 6.3 | 0.0035 | 2026-10-29 | Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested | |
CVE-2026-114388 |
medium | 6.9 | 0.0017 | 2026-10-29 | Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 contain a missing acce | |
CVE-2026-114389 |
medium | 5.3 | 0.0027 | 2026-10-29 | Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing authorization vulnerab | |
CVE-2026-114390 |
medium | 6.9 | 0.0023 | 2026-10-29 | Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a missing authorization vulnerab | |
CVE-2026-114392 |
medium | 6.9 | 0.0044 | 2026-10-29 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenti | |
CVE-2026-114393 |
medium | 5.3 | 0.0032 | 2026-10-29 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any auth | |
CVE-2026-114394 |
medium | 5.3 | 0.0032 | 2026-10-29 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenti | |
CVE-2026-114395 |
medium | 5.3 | 0.0032 | 2026-10-29 | Trudesk through 1.2.11 contains an authorization bypass vulnerability in apiMessages.send | |
CVE-2026-114398 |
medium | 5.1 | 0.0027 | 2026-10-29 | Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any | |
CVE-2026-114401 |
medium | 6.9 | 0.0044 | 2026-10-29 | Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows u | |
CVE-2026-114402 |
medium | 5.3 | 0.0043 | 2026-10-29 | Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in | |
CVE-2026-114404 |
medium | 5.3 | 0.0026 | 2026-10-29 | PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML | |
CVE-2026-114407 |
medium | 5.1 | 0.0028 | 2026-10-29 | e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows | |
CVE-2026-82953 |
medium | 5.3 | 0.0048 | 2026-10-29 | NULL pointer dereference in the RTMP protocol implementation in Apache bRPC (version < 1.1 | |
CVE-2026-84727 |
medium | 5.4 | 0.0032 | 2026-10-29 | Use-after-free in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on al | |
CVE-2026-87849 |
medium | 4.3 | 0.0035 | 2026-10-29 | The Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJS | |
CVE-2026-90484 |
medium | 6.5 | 0.0038 | 2026-10-29 | The MySQL client response parser in Apache bRPC dereferences a null pointer when the serve | |
CVE-2024-4989 |
medium | 5.4 | 0.0017 | 2026-10-29 | The callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allo | |
CVE-2024-5139 |
medium | 6.1 | 0.0023 | 2026-10-29 | The Authentication Endpoint accepts user-supplied input without sufficient encoding, allow | |
CVE-2024-5563 |
medium | 4.8 | 0.0019 | 2026-10-29 | Due to an incomplete implementation, reCaptcha is not applied to certain authentication fl | |
CVE-2024-6423 |
medium | 4.0 | 0.0010 | 2026-10-29 | The product failed to enforce validation constraints on user-supplied input in URL paramet | |
CVE-2024-7478 |
medium | 5.8 | 0.0024 | 2026-10-29 | When a WSO2 product is configured to use an external user store, the system fails to adequ | |
CVE-2025-60479 |
medium | 5.5 | 0.0019 | 2026-10-29 | A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of G | |
CVE-2025-60489 |
medium | 5.5 | 0.0019 | 2026-10-29 | A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c | |
CVE-2025-71438 |
medium | 5.5 | 0.0019 | 2026-10-29 | An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box | |
CVE-2026-104947 |
medium | 5.3 | 0.0022 | 2026-10-29 | WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerabilit | |
CVE-2026-114249 |
medium | 5.5 | 0.0030 | 2026-10-29 | A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109a | |
CVE-2025-60478 |
medium | 5.5 | 0.0018 | 2026-10-29 | A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of G | |
CVE-2025-60487 |
medium | 5.5 | 0.0018 | 2026-10-29 | A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC P | |
CVE-2025-60490 |
medium | 5.5 | 0.0018 | 2026-10-29 | A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/fi | |
CVE-2025-60491 |
medium | 5.5 | 0.0019 | 2026-10-29 | A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Pro | |
CVE-2025-60492 |
medium | 5.5 | 0.0027 | 2026-10-29 | A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/M | |
CVE-2025-60493 |
medium | 5.5 | 0.0018 | 2026-10-29 | A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Pr | |
CVE-2025-60497 |
medium | 5.5 | 0.0024 | 2026-10-29 | A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box | |
CVE-2026-114250 |
medium | 5.3 | 0.0021 | 2026-10-29 | A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8 | |
CVE-2025-60469 |
medium | 5.5 | 0.0019 | 2026-10-29 | A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_pa | |
CVE-2025-60476 |
medium | 5.5 | 0.0018 | 2026-10-29 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GP | |
CVE-2026-102484 |
medium | 6.4 | 0.0021 | 2026-10-29 | Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows a | |
CVE-2026-102485 |
medium | 5.2 | 0.0018 | 2026-10-29 | Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allo | |
CVE-2026-113787 |
medium | 6.1 | 0.0025 | 2026-10-29 | odf-kit allows users to generate, fill, read, and convert OpenDocument Format files (.odt, | |
CVE-2026-113789 |
medium | 6.0 | 0.0039 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can | |
CVE-2026-113790 |
medium | 6.0 | 0.0039 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can | |
CVE-2026-113791 |
medium | 6.0 | 0.0039 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can |