Browse All CVEs
10,546 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-113791 |
medium | 6.0 | 0.0039 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can | |
CVE-2026-113792 |
medium | 6.0 | 0.0047 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWrite | |
CVE-2026-113793 |
medium | 6.0 | 0.0047 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an obje | |
CVE-2026-113794 |
medium | 6.0 | 0.0047 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can | |
CVE-2026-113795 |
medium | 6.0 | 0.0047 | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a craf | |
CVE-2026-114253 |
medium | 5.3 | 0.0033 | 2026-10-29 | A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f12 | |
CVE-2026-114254 |
medium | 5.5 | 0.0042 | 2026-10-29 | A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f12 | |
CVE-2026-114255 |
medium | 6.9 | 0.0027 | 2026-10-29 | A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe | |
CVE-2026-114256 |
medium | 6.9 | 0.0027 | 2026-10-29 | A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f12 | |
CVE-2026-114257 |
medium | 5.5 | 0.0040 | 2026-10-29 | A security vulnerability has been detected in oretnom23 file-management-system-php up to 2 | |
CVE-2026-114462 |
medium | 6.0 | 0.0031 | 2026-10-29 | Improper link resolution before file access ('link following') vulnerability in Velneo vSe | |
CVE-2026-114470 |
medium | 5.3 | 0.0015 | 2026-10-29 | Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through | |
CVE-2026-114471 |
medium | 4.7 | 0.0010 | 2026-10-29 | Insertion of sensitive information into a log file in the SMTP server of Progressive Robot | |
CVE-2026-114473 |
medium | 5.0 | 0.0024 | 2026-10-29 | Incorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robot hMailSer | |
CVE-2026-114474 |
medium | 5.9 | 0.0016 | 2026-10-29 | Use of a less trusted source for the envelope sender in the external-account download of P | |
CVE-2026-114475 |
medium | 6.5 | 0.0024 | 2026-10-29 | Missing authorization in the REST role-management routes of Progressive Robot hMailServer | |
CVE-2026-114477 |
medium | 4.3 | 0.0021 | 2026-10-29 | Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 th | |
CVE-2026-114478 |
medium | 5.9 | 0.0026 | 2026-10-29 | Insufficient preservation of the original sender in the forwarding of Progressive Robot hM | |
CVE-2026-114479 |
medium | 5.8 | 0.0032 | 2026-10-29 | Not failing securely in the anti-virus attachment-stripping action of Progressive Robot hM | |
CVE-2026-113796 |
medium | 4.2 | 0.0022 | 2026-10-29 | Electron is a framework for writing cross-platform desktop applications using JavaScript, | |
CVE-2026-113798 |
medium | 5.4 | 0.0024 | 2026-10-29 | Electron is a framework for writing cross-platform desktop applications using JavaScript, | |
CVE-2026-113799 |
medium | 5.3 | 0.0043 | 2026-10-29 | Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Ver | |
CVE-2026-113800 |
medium | 5.4 | 0.0024 | 2026-10-29 | Electron is a framework for writing cross-platform desktop applications using JavaScript, | |
CVE-2026-114121 |
medium | 5.4 | 0.0022 | 2026-10-29 | Electron is a framework for writing cross-platform desktop applications using JavaScript, | |
CVE-2026-114258 |
medium | 6.9 | 0.0034 | 2026-10-29 | A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e | |
CVE-2026-114259 |
medium | 6.9 | 0.0030 | 2026-10-29 | A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3 | |
CVE-2026-114260 |
medium | 5.5 | 0.0055 | 2026-10-29 | A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f12 | |
CVE-2026-114261 |
medium | 6.9 | 0.0051 | 2026-10-29 | A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce | |
CVE-2026-20011 |
medium | 5.8 | 0.0053 | 2026-10-29 | Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder t | |
CVE-2026-20019 |
medium | 5.8 | 0.0053 | 2026-10-29 | Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection E | |
CVE-2026-20179 |
medium | 5.8 | 0.0050 | 2026-10-29 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Enc | |
CVE-2026-20197 |
medium | 5.8 | 0.0050 | 2026-10-29 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection En | |
CVE-2026-20218 |
medium | 5.8 | 0.0063 | 2026-10-29 | A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of | |
CVE-2026-20221 |
medium | 5.8 | 0.0058 | 2026-10-29 | Multiple Cisco products are affected by a vulnerability in the generic routing encapsulati | |
CVE-2026-53986 |
medium | 6.9 | 0.0022 | 2026-10-29 | Girafit camera app (Android and iOS) version 1.9.1 and earlier, and Girafit camera devices | |
CVE-2026-76435 |
medium | 5.3 | 0.0043 | 2026-10-29 | A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker | |
CVE-2026-76445 |
medium | 5.3 | 0.0053 | 2026-10-29 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine th | |
CVE-2026-76462 |
medium | 5.5 | 0.0014 | 2026-10-29 | A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Pos | |
CVE-2026-76487 |
medium | 5.3 | 0.0061 | 2026-10-29 | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Com | |
CVE-2026-76489 |
medium | 5.8 | 0.0046 | 2026-10-29 | Multiple Cisco products are affected by a vulnerability in the memory management implement | |
CVE-2026-76497 |
medium | 6.6 | 0.0016 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-105926 |
medium | 5.3 | 0.0041 | 2026-10-29 | The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which retu | |
CVE-2026-105930 |
medium | 6.0 | 0.0045 | 2026-10-29 | When package management is enabled, Pulsar Functions, Sources and Sinks can be registered | |
CVE-2026-112868 |
medium | 4.3 | 0.0027 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Explo | |
CVE-2026-114128 |
medium | 6.5 | 0.0032 | 2026-10-29 | Astro is a web framework for content-driven websites. Prior to 7.3.2, Astro's JSX and MDX | |
CVE-2026-114129 |
medium | 6.2 | 0.0025 | 2026-10-29 | stream-json is a micro-library of stream components for processing JSON and JSONC with a m | |
CVE-2026-114131 |
medium | 6.5 | 0.0036 | 2026-10-29 | Nuxt is an open-source web development framework for Vue.js. From 3.11.0 until 3.21.4 and | |
CVE-2026-114132 |
medium | 6.3 | 0.0042 | 2026-10-29 | Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves | |
CVE-2026-114133 |
medium | 5.4 | 0.0022 | 2026-10-29 | Nuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the | |
CVE-2026-114176 |
medium | 4.3 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows |