Browse All CVEs
10,595 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-75628 |
medium | 5.7 | 0.0050 | 2026-10-29 | Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect afte | |
CVE-2026-76783 |
medium | 5.5 | 0.0041 | 2026-10-29 | A security vulnerability has been detected in DeDeCMS 53_1_UTF8. This vulnerability affect | |
CVE-2026-77014 |
medium | 5.3 | 0.0023 | 2026-10-29 | A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() c | |
CVE-2026-73196 |
medium | 6.5 | 0.0043 | 2026-10-29 | A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerabi | |
CVE-2026-73199 |
medium | 6.5 | 0.0035 | 2026-10-29 | A flaw was found in the `ipa-enrollment` SLAPI plugin. A remote authenticated client can e | |
CVE-2026-64961 |
medium | 6.3 | 0.0048 | 2026-10-29 | ATutor is vulnerable to authentication bypass . Although a token validation check is prese | |
CVE-2026-64962 |
medium | 5.1 | 0.0022 | 2026-10-29 | ATutor is vulnerable to Cross-Site Request Forgery (CSRF) in profile update functionality. | |
CVE-2026-64964 |
medium | 6.3 | 0.0037 | 2026-10-29 | ATutor generates predictable email confirmation tokens due to the use of insufficiently ra | |
CVE-2026-64965 |
medium | 5.3 | 0.0039 | 2026-10-29 | ATutor is vulnerable to Missing Authorization Check on Test and Question Import endpoints. | |
CVE-2026-64967 |
medium | 6.9 | 0.0049 | 2026-10-29 | A path traversal vulnerability in ATutor's error log viewer allows an attacker with admini | |
CVE-2026-64968 |
medium | 5.1 | 0.0040 | 2026-10-29 | ATutor is vulnerable to Server-Side request forgery in import functionalities. An authenti | |
CVE-2026-64969 |
medium | 5.3 | 0.0036 | 2026-10-29 | ATutor is vulnerable to Insecure Direct Object Reference (IDOR) attack in profile picture | |
CVE-2026-64970 |
medium | 5.1 | 0.0046 | 2026-10-29 | ATutor is vulnerable to Stored Cross Site Scripting in registration functionality. An att | |
CVE-2026-64971 |
medium | 4.8 | 0.0050 | 2026-10-29 | ATutor is vulnerable to Reflected XSS in restore functionality. An attacker can provide a | |
CVE-2026-64972 |
medium | 4.8 | 0.0040 | 2026-10-29 | ATutor is vulnerable to Reflected XSS via popup parameter in preview.php. An authenticated | |
CVE-2026-44725 |
medium | 6.6 | 0.0037 | 2026-10-29 | EMQX is a scalable and reliable MQTT broker for AI, IoT, IIoT, and connected vehicles. Pri | |
CVE-2026-61625 |
medium | 6.8 | 0.0040 | 2026-10-29 | VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior | |
CVE-2026-54625 |
medium | 4.8 | 0.0018 | 2026-10-29 | django CMS is a content management system powered by Django. Prior to 5.0.8 and in 5.1.0a1 | |
CVE-2026-63379 |
medium | 6.3 | 0.0071 | 2026-10-29 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent proce | |
CVE-2026-63380 |
medium | 5.7 | 0.0014 | 2026-10-29 | Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference | |
CVE-2026-63381 |
medium | 5.8 | 0.0016 | 2026-10-29 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a | |
CVE-2026-72844 |
medium | 6.8 | 0.0019 | 2026-10-29 | The Lean 4 kernel does not verify that the structure named in a projection expression matc | |
CVE-2026-15743 |
medium | 5.7 | 0.0041 | 2026-10-29 | Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly | |
CVE-2026-19683 |
medium | 6.3 | 0.0034 | 2026-10-29 | A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. | |
CVE-2026-53569 |
medium | 5.3 | 0.0046 | 2026-10-29 | Frappe is a full-stack web application framework. In version 16.31.0 and earlier, the whit | |
CVE-2026-53583 |
medium | 6.5 | 0.0024 | 2026-10-29 | libgit2 is a portable C implementation of the Git core methods provided as a linkable libr | |
CVE-2026-53584 |
medium | 4.3 | 0.0033 | 2026-10-29 | libgit2 is a portable C implementation of the Git core methods provided as a linkable libr | |
CVE-2026-53585 |
medium | 5.3 | 0.0040 | 2026-10-29 | libgit2 is a portable C implementation of the Git core methods provided as a linkable libr | |
CVE-2026-53586 |
medium | 6.5 | 0.0028 | 2026-10-29 | libgit2 is a portable C implementation of the Git core methods provided as a linkable libr | |
CVE-2026-54622 |
medium | 6.5 | 0.0042 | 2026-10-29 | django CMS is an easy-to-use and developer-friendly enterprise content management system p | |
CVE-2026-54624 |
medium | 6.5 | 0.0042 | 2026-10-29 | django CMS is an easy-to-use and developer-friendly enterprise content management system p | |
CVE-2026-61663 |
medium | 4.3 | 0.0034 | 2026-10-29 | django CMS is an easy-to-use and developer-friendly enterprise content management system p | |
CVE-2026-63003 |
medium | 6.5 | 0.0042 | 2026-10-29 | django CMS is an easy-to-use and developer-friendly enterprise content management system p | |
CVE-2026-63654 |
medium | 6.9 | 0.0026 | 2026-10-29 | Frappe is a full-stack web application framework. In version 16.31.0 and earlier, the whit | |
CVE-2026-66002 |
medium | 6.9 | 0.0082 | 2026-10-29 | Frappe is a full-stack web application framework. Prior to 15.115.0 and 16.27.0, the publi | |
CVE-2026-75526 |
medium | 4.4 | 0.0026 | 2026-10-29 | django CMS is an easy-to-use and developer-friendly enterprise content management system p | |
CVE-2026-9033 |
medium | 6.0 | 0.0028 | 2026-10-29 | An unauthenticated attacker with network access to the captive portal service of an affect | |
CVE-2026-19755 |
medium | 6.9 | 0.0014 | 2026-10-29 | NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages co | |
CVE-2026-68921 |
medium | 4.7 | 0.0029 | 2026-10-29 | DiceBear is an avatar library for designers and developers. Prior to 9.4.3, @dicebear/core | |
CVE-2026-70651 |
medium | 6.9 | 0.0012 | 2026-10-29 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, | |
CVE-2026-70653 |
medium | 4.8 | 0.0012 | 2026-10-29 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, | |
CVE-2026-70654 |
medium | 5.8 | 0.0011 | 2026-10-29 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, | |
CVE-2026-77506 |
medium | 4.8 | 0.0024 | 2026-10-29 | Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS. | |
CVE-2026-16951 |
medium | 6.7 | 0.0017 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker t | |
CVE-2026-16952 |
medium | 5.5 | 0.0013 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a deni | |
CVE-2026-16964 |
medium | 6.5 | 0.0034 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept m | |
CVE-2026-16973 |
medium | 5.5 | 0.0014 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sen | |
CVE-2026-16980 |
medium | 5.5 | 0.0014 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a deni | |
CVE-2026-17009 |
medium | 5.5 | 0.0012 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a deni | |
CVE-2026-17195 |
medium | 6.5 | 0.0013 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a deni |