Browse All CVEs
10,551 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-114131 |
medium | 6.5 | 0.0036 | 2026-10-29 | Nuxt is an open-source web development framework for Vue.js. From 3.11.0 until 3.21.4 and | |
CVE-2026-114132 |
medium | 6.3 | 0.0042 | 2026-10-29 | Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves | |
CVE-2026-114133 |
medium | 5.4 | 0.0022 | 2026-10-29 | Nuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the | |
CVE-2026-114176 |
medium | 4.3 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows | |
CVE-2026-114262 |
medium | 6.9 | 0.0037 | 2026-10-29 | A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc | |
CVE-2026-114263 |
medium | 5.5 | 0.0033 | 2026-10-29 | A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. Th | |
CVE-2026-114264 |
medium | 5.1 | 0.0021 | 2026-10-29 | A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1. | |
CVE-2026-114265 |
medium | 5.3 | 0.0025 | 2026-10-29 | A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. Th | |
CVE-2026-114491 |
medium | 6.9 | 0.0026 | 2026-10-29 | pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to image | |
CVE-2026-92205 |
medium | 6.1 | 0.0031 | 2026-10-29 | BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This | |
CVE-2026-105935 |
medium | 4.9 | 0.0040 | 2026-10-29 | The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which | |
CVE-2026-105936 |
medium | 5.3 | 0.0050 | 2026-10-29 | The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pul | |
CVE-2026-111401 |
medium | 6.5 | 0.0015 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools tailored- | |
CVE-2026-113461 |
medium | 5.2 | 0.0012 | 2026-10-29 | Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to th | |
CVE-2026-114267 |
medium | 6.9 | 0.0031 | 2026-10-29 | A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected | |
CVE-2026-114361 |
medium | 6.3 | 0.0040 | 2026-10-29 | A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown funct | |
CVE-2026-19947 |
medium | 5.3 | 0.0013 | 2026-10-29 | The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system ca | |
CVE-2026-78116 |
medium | 5.2 | 0.0021 | 2026-10-29 | The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission whe | |
CVE-2026-78117 |
medium | 4.2 | 0.0016 | 2026-10-29 | The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c s | |
CVE-2026-78119 |
medium | 6.3 | 0.0014 | 2026-10-29 | The Nuvoton NPCX eSPI driver parses Target-Attached-Flash (TAF) requests in espi_taf_parse | |
CVE-2026-111817 |
medium | 6.9 | 0.0036 | 2026-10-29 | Apache Traffic Server can stall a chunked transfer that it passes through with its trailer | |
CVE-2026-114362 |
medium | 5.3 | 0.0024 | 2026-10-29 | A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of | |
CVE-2026-114374 |
medium | 5.3 | 0.0024 | 2026-10-29 | A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unk | |
CVE-2026-114376 |
medium | 5.3 | 0.0029 | 2026-10-29 | A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vu | |
CVE-2026-114438 |
medium | 4.2 | 0.0016 | 2026-10-29 | A flaw was found in the Update User Locale required action of the Keycloak identity and ac | |
CVE-2026-85518 |
medium | 6.1 | 0.0045 | 2026-10-29 | A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the applica | |
CVE-2026-114377 |
medium | 5.1 | 0.0040 | 2026-10-29 | A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affecte | |
CVE-2026-114379 |
medium | 5.3 | 0.0027 | 2026-10-29 | A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vulnerability affects t | |
CVE-2026-114380 |
medium | 5.3 | 0.0021 | 2026-10-29 | A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an | |
CVE-2026-114406 |
medium | 6.8 | 0.0031 | 2026-10-29 | The system certificate authority (CA) store in Red Hat products, distributed via ca-certif | |
CVE-2026-96636 |
medium | 6.5 | 0.0034 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile. | |
CVE-2026-96638 |
medium | 6.5 | 0.0034 | 2026-10-29 | Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src | |
CVE-2026-96641 |
medium | 6.5 | 0.0034 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in sr | |
CVE-2026-114501 |
medium | 6.3 | 0.0037 | 2026-10-29 | Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an | |
CVE-2026-114508 |
medium | 6.5 | 0.0041 | 2026-10-29 | Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted re | |
CVE-2026-100420 |
medium | 6.8 | 0.0015 | 2026-10-29 | A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 a | |
CVE-2026-114439 |
medium | 6.9 | 0.0054 | 2026-10-29 | A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this iss | |
CVE-2026-114440 |
medium | 6.9 | 0.0034 | 2026-10-29 | A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unkn | |
CVE-2026-114441 |
medium | 5.5 | 0.0042 | 2026-10-29 | A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects s | |
CVE-2026-76287 |
medium | 5.4 | 0.0021 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data | |
CVE-2026-76289 |
medium | 6.5 | 0.0037 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does n | |
CVE-2026-76292 |
medium | 6.5 | 0.0034 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure | |
CVE-2026-76294 |
medium | 4.3 | 0.0027 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does n | |
CVE-2026-76295 |
medium | 4.3 | 0.0028 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure | |
CVE-2026-76296 |
medium | 4.3 | 0.0021 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does n | |
CVE-2026-76297 |
medium | 5.4 | 0.0011 | 2026-10-29 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticate | |
CVE-2026-76303 |
medium | 5.7 | 0.0023 | 2026-10-29 | In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capabi | |
CVE-2026-76304 |
medium | 4.3 | 0.0016 | 2026-10-29 | In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with p | |
CVE-2026-76305 |
medium | 6.5 | 0.0027 | 2026-10-29 | In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with p | |
CVE-2026-76308 |
medium | 6.5 | 0.0017 | 2026-10-29 | In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Sec |