Browse All CVEs
10,554 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-76304 |
medium | 4.3 | 0.0016 | 2026-10-29 | In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with p | |
CVE-2026-76305 |
medium | 6.5 | 0.0027 | 2026-10-29 | In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with p | |
CVE-2026-76308 |
medium | 6.5 | 0.0017 | 2026-10-29 | In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Sec | |
CVE-2026-76406 |
medium | 5.9 | 0.0032 | 2026-10-29 | In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted cred | |
CVE-2026-89052 |
medium | 5.9 | 0.0024 | 2026-10-29 | A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use | |
CVE-2026-105777 |
medium | 6.5 | 0.0028 | 2026-10-29 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 1 | |
CVE-2026-112378 |
medium | 4.3 | 0.0013 | 2026-10-29 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6 | |
CVE-2026-114574 |
medium | 5.3 | 0.0031 | 2026-10-29 | A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unk | |
CVE-2026-114714 |
medium | 5.3 | 0.0037 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vul | |
CVE-2026-12664 |
medium | 6.8 | 0.0040 | 2026-10-29 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19. | |
CVE-2026-13319 |
medium | 6.5 | 0.0024 | 2026-10-29 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19 | |
CVE-2026-114577 |
medium | 6.9 | 0.0034 | 2026-10-29 | A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affect | |
CVE-2026-114634 |
medium | 5.3 | 0.0025 | 2026-10-29 | WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in ge | |
CVE-2026-114641 |
medium | 6.3 | 0.0026 | 2026-10-29 | Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and | |
CVE-2026-114656 |
medium | 6.9 | 0.0015 | 2026-10-29 | Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that all | |
CVE-2026-114657 |
medium | 6.9 | 0.0022 | 2026-10-29 | Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows | |
CVE-2026-114717 |
medium | 5.8 | 0.0045 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header inject | |
CVE-2026-114718 |
medium | 6.1 | 0.0029 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripti | |
CVE-2026-114719 |
medium | 4.3 | 0.0022 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation by | |
CVE-2026-114722 |
medium | 6.5 | 0.0025 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass | |
CVE-2026-114725 |
medium | 5.0 | 0.0033 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header inject | |
CVE-2026-114726 |
medium | 5.8 | 0.0040 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header inject | |
CVE-2026-114728 |
medium | 5.3 | 0.0037 | 2026-10-29 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blo | |
CVE-2026-81163 |
medium | 5.4 | 0.0027 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-84910 |
medium | 4.2 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. Th | |
CVE-2026-84912 |
medium | 4.6 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful | |
CVE-2026-84913 |
medium | 4.6 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This | |
CVE-2026-84914 |
medium | 5.3 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Brows | |
CVE-2026-84915 |
medium | 4.6 | 0.0021 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-84917 |
medium | 6.5 | 0.0025 | 2026-10-29 | Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Brows | |
CVE-2026-84919 |
medium | 4.6 | 0.0021 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-84920 |
medium | 5.3 | 0.0029 | 2026-10-29 | Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forcef | |
CVE-2026-84921 |
medium | 5.3 | 0.0037 | 2026-10-29 | Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful B | |
CVE-2026-84923 |
medium | 6.5 | 0.0031 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Ver | |
CVE-2026-84924 |
medium | 5.4 | 0.0023 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-87936 |
medium | 6.5 | 0.0027 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-87937 |
medium | 6.5 | 0.0028 | 2026-10-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authen | |
CVE-2026-87938 |
medium | 6.5 | 0.0036 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-87939 |
medium | 4.2 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-87940 |
medium | 5.4 | 0.0023 | 2026-10-29 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth | |
CVE-2026-87941 |
medium | 5.9 | 0.0031 | 2026-10-29 | Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x. | |
CVE-2026-87942 |
medium | 4.6 | 0.0021 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-87943 |
medium | 6.5 | 0.0025 | 2026-10-29 | Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful | |
CVE-2026-87944 |
medium | 4.8 | 0.0014 | 2026-10-29 | Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allow | |
CVE-2026-87945 |
medium | 5.4 | 0.0022 | 2026-10-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Ser | |
CVE-2026-87946 |
medium | 4.8 | 0.0022 | 2026-10-29 | Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows | |
CVE-2026-87947 |
medium | 4.8 | 0.0014 | 2026-10-29 | Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Servic | |
CVE-2026-87950 |
medium | 5.3 | 0.0029 | 2026-10-29 | Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows | |
CVE-2026-87954 |
medium | 4.3 | 0.0026 | 2026-10-29 | Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Brows | |
CVE-2026-87955 |
medium | 4.3 | 0.0024 | 2026-10-29 | Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsin |