Browse All CVEs
10,582 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-76033 |
medium | 4.2 | 0.0022 | 2026-10-29 | Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a re | |
CVE-2026-76039 |
medium | 6.5 | 0.0032 | 2026-10-29 | Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922. | |
CVE-2026-76041 |
medium | 4.3 | 0.0035 | 2026-10-29 | Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacke | |
CVE-2026-47699 |
medium | 6.4 | 0.0029 | 2026-10-29 | Confidential Containers Guest Components provides guest tools and components for confident | |
CVE-2026-52873 |
medium | 6.9 | 0.0036 | 2026-10-29 | Streambert is a cross-platform Electron Desktop App to stream and download video content. | |
CVE-2026-53959 |
medium | 6.5 | 0.0103 | 2026-10-29 | 4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards al | |
CVE-2026-62289 |
medium | 4.3 | 0.0030 | 2026-10-29 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a craft | |
CVE-2026-62291 |
medium | 5.3 | 0.0019 | 2026-10-29 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a craft | |
CVE-2026-62377 |
medium | 4.3 | 0.0041 | 2026-10-29 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a craft | |
CVE-2026-66603 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-73973 |
medium | 5.5 | 0.0029 | 2026-10-29 | Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related | |
CVE-2026-27365 |
medium | 5.9 | 0.0024 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-66589 |
medium | 5.4 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly | |
CVE-2026-66591 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-15421 |
medium | 6.4 | 0.0041 | 2026-10-29 | The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is v | |
CVE-2026-75986 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted | |
CVE-2026-75987 |
medium | 6.9 | 0.0056 | 2026-10-29 | A vulnerability was found in SPLWare esProc up to 20260507. This affects the function Obje | |
CVE-2026-76048 |
medium | 5.5 | 0.0043 | 2026-10-29 | A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impact | |
CVE-2026-76049 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. T | |
CVE-2026-76050 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This i | |
CVE-2026-13175 |
medium | 6.5 | 0.0042 | 2026-10-29 | The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing sche | |
CVE-2026-14196 |
medium | 4.3 | 0.0025 | 2026-10-29 | The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace ven | |
CVE-2026-14287 |
medium | 4.7 | 0.0022 | 2026-10-29 | The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access to | |
CVE-2026-15253 |
medium | 6.8 | 0.0043 | 2026-10-29 | The Easy Media Replace WordPress plugin through 0.2.0 does not sanitise and escape an atta | |
CVE-2026-16058 |
medium | 5.3 | 0.0032 | 2026-10-29 | The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownershi | |
CVE-2026-18202 |
medium | 6.8 | 0.0043 | 2026-10-29 | The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upl | |
CVE-2026-19709 |
medium | 5.3 | 0.0032 | 2026-10-29 | The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API co | |
CVE-2026-49424 |
medium | 5.5 | 0.0015 | 2026-10-29 | The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-decla | |
CVE-2026-49425 |
medium | 5.5 | 0.0015 | 2026-10-29 | The compat32 kevent() handler translates a 64-bit kevent struct into a stack- declared 32- | |
CVE-2026-58084 |
medium | 5.5 | 0.0014 | 2026-10-29 | To retrieve the previous timer value, the kernel calls realtimer_gettime(), which obtains | |
CVE-2026-16440 |
medium | 5.7 | 0.0030 | 2026-10-29 | In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotation | |
CVE-2026-18371 |
medium | 5.1 | 0.0040 | 2026-10-29 | HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated at | |
CVE-2026-18372 |
medium | 4.8 | 0.0043 | 2026-10-29 | CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vau | |
CVE-2026-65611 |
medium | 5.1 | 0.0044 | 2026-10-29 | nnn does not sanitize the path variable. An attacker can create a directory on a shared fi | |
CVE-2026-65612 |
medium | 5.1 | 0.0044 | 2026-10-29 | nnn does not sanitize the filename variable. An attacker can place a file with a crafted n | |
CVE-2026-76226 |
medium | 6.8 | 0.0029 | 2026-10-29 | Renovate versions from 43.65.0 before 43.102.11 contain a remote code execution vulnerabil | |
CVE-2026-76239 |
medium | 5.3 | 0.0032 | 2026-10-29 | Stigmem before 0.9.0a11 fails to validate the delivery_address parameter when creating web | |
CVE-2026-40507 |
medium | 5.1 | 0.0034 | 2026-10-29 | OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patien | |
CVE-2026-40508 |
medium | 5.1 | 0.0030 | 2026-10-29 | OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the patient p | |
CVE-2026-40509 |
medium | 5.3 | 0.0019 | 2026-10-29 | OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM view | |
CVE-2026-76614 |
medium | 5.3 | 0.0040 | 2026-10-29 | OpenEMR before 8.3.0 contains a path traversal vulnerability in the EDI archive restore fu | |
CVE-2026-44253 |
medium | 4.9 | 0.0061 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-44254 |
medium | 5.3 | 0.0050 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-20314 |
medium | 5.0 | 0.0044 | 2026-10-29 | A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unifi | |
CVE-2026-44255 |
medium | 5.3 | 0.0062 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-44256 |
medium | 5.3 | 0.0049 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-49392 |
medium | 5.3 | 0.0030 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-75145 |
medium | 5.8 | 0.0016 | 2026-10-29 | FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 | |
CVE-2026-75147 |
medium | 6.9 | 0.0012 | 2026-10-29 | FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer (lib | |
CVE-2026-18874 |
medium | 6.2 | 0.0054 | 2026-10-29 | A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inj |