Browse All CVEs
10,573 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-13411 |
medium | 4.3 | 0.0032 | 2026-10-29 | Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playboo | |
CVE-2026-115248 |
medium | 5.3 | 0.0025 | 2026-10-29 | A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a | |
CVE-2026-115400 |
medium | 6.7 | 0.0010 | 2026-10-29 | crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attac | |
CVE-2026-115411 |
medium | 5.3 | 0.0028 | 2026-10-29 | crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its | |
CVE-2026-66281 |
medium | 6.0 | 0.0033 | 2026-10-29 | In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a lo | |
CVE-2026-66282 |
medium | 6.0 | 0.0033 | 2026-10-29 | In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a | |
CVE-2026-85080 |
medium | 6.0 | 0.0050 | 2026-10-29 | In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an ou | |
CVE-2026-89409 |
medium | 5.3 | 0.0027 | 2026-10-29 | In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for | |
CVE-2026-89410 |
medium | 5.1 | 0.0018 | 2026-10-29 | In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds rea | |
CVE-2026-114515 |
medium | 6.5 | 0.0027 | 2026-10-29 | OCO-Server is a self-hosted endpoint management application for computer inventory, softwa | |
CVE-2026-78801 |
medium | 4.3 | 0.0031 | 2026-10-29 | An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) | |
CVE-2026-114485 |
medium | 4.3 | 0.0024 | 2026-10-29 | Insufficient protection of sensitive information in the user list endpoint in Devolutions | |
CVE-2026-114486 |
medium | 4.3 | 0.0022 | 2026-10-29 | Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server | |
CVE-2026-114487 |
medium | 4.3 | 0.0020 | 2026-10-29 | Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3. | |
CVE-2026-114603 |
medium | 5.3 | 0.0049 | 2026-10-29 | OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.1, t | |
CVE-2026-115454 |
medium | 5.3 | 0.0037 | 2026-10-29 | An excessive resource allocation issue in the remote workflow editing capabilities of KNIM | |
CVE-2026-115494 |
medium | 5.3 | 0.0019 | 2026-10-29 | A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to | |
CVE-2026-115496 |
medium | 6.9 | 0.0040 | 2026-10-29 | Overly informative error messages in the catalog functionality of KNIME Business Hub prior | |
CVE-2026-114606 |
medium | 5.6 | 0.0036 | 2026-10-29 | draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Deskto | |
CVE-2026-114608 |
medium | 5.4 | 0.0011 | 2026-10-29 | Pylint is a static code analyser for Python. From 0.15.2 until 4.0.9, Pylint stores module | |
CVE-2026-115416 |
medium | 6.3 | 0.0027 | 2026-10-29 | Incorrect authorization checks in Amazon Athena engine version 3 query processing could ha | |
CVE-2026-115502 |
medium | 6.3 | 0.0028 | 2026-10-29 | A missing authorization check allows anyone having access to a "link without login" for a | |
CVE-2026-115513 |
medium | 6.3 | 0.0030 | 2026-10-29 | OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a | |
CVE-2026-70841 |
medium | 5.6 | 0.0013 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70843 |
medium | 6.8 | 0.0030 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70847 |
medium | 6.5 | 0.0015 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70849 |
medium | 6.5 | 0.0047 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70888 |
medium | 6.6 | 0.0037 | 2026-10-29 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperi | |
CVE-2026-70895 |
medium | 6.5 | 0.0015 | 2026-10-29 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperi | |
CVE-2026-70907 |
medium | 5.3 | 0.0028 | 2026-10-29 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edi | |
CVE-2026-70911 |
medium | 5.3 | 0.0034 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70912 |
medium | 5.3 | 0.0011 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70916 |
medium | 4.0 | 0.0018 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70917 |
medium | 4.0 | 0.0018 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70923 |
medium | 6.1 | 0.0024 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-70938 |
medium | 6.5 | 0.0035 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70961 |
medium | 6.1 | 0.0024 | 2026-10-29 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion | |
CVE-2026-70963 |
medium | 4.2 | 0.0019 | 2026-10-29 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion | |
CVE-2026-70968 |
medium | 6.5 | 0.0035 | 2026-10-29 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion | |
CVE-2026-70969 |
medium | 6.5 | 0.0035 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70972 |
medium | 6.8 | 0.0029 | 2026-10-29 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion | |
CVE-2026-70974 |
medium | 5.3 | 0.0028 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70975 |
medium | 6.5 | 0.0035 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70982 |
medium | 6.8 | 0.0033 | 2026-10-29 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr | |
CVE-2026-70983 |
medium | 6.8 | 0.0033 | 2026-10-29 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr | |
CVE-2026-70989 |
medium | 6.5 | 0.0015 | 2026-10-29 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr | |
CVE-2026-70990 |
medium | 6.8 | 0.0035 | 2026-10-29 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr | |
CVE-2026-70991 |
medium | 6.3 | 0.0017 | 2026-10-29 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr | |
CVE-2026-71001 |
medium | 6.5 | 0.0035 | 2026-10-29 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr | |
CVE-2026-71004 |
medium | 6.1 | 0.0024 | 2026-10-29 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr |