Browse All CVEs
10,600 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-16964 |
medium | 6.5 | 0.0034 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept m | |
CVE-2026-16973 |
medium | 5.5 | 0.0014 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sen | |
CVE-2026-16980 |
medium | 5.5 | 0.0014 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a deni | |
CVE-2026-17009 |
medium | 5.5 | 0.0012 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a deni | |
CVE-2026-17195 |
medium | 6.5 | 0.0013 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a deni | |
CVE-2026-17424 |
medium | 6.5 | 0.0037 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass secu | |
CVE-2026-18822 |
medium | 5.5 | 0.0014 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a deni | |
CVE-2026-55489 |
medium | 4.9 | 0.0031 | 2026-10-29 | BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presente | |
CVE-2026-55491 |
medium | 5.4 | 0.0029 | 2026-10-29 | BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton failed t | |
CVE-2026-70105 |
medium | 6.5 | 0.0097 | 2026-10-29 | Improper input validation in Microsoft Office Word allows an unauthorized attacker to disc | |
CVE-2026-72846 |
medium | 5.3 | 0.0032 | 2026-10-29 | Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it | |
CVE-2026-65645 |
medium | 4.3 | 0.0034 | 2026-10-29 | Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6. 8.3.8, 8.2.8, 8.1.8, and | |
CVE-2026-16962 |
medium | 5.3 | 0.0030 | 2026-10-29 | The Tamara Checkout WordPress plugin through 1.9.9.20 does not verify the order key, a non | |
CVE-2026-73537 |
medium | 5.1 | 0.0029 | 2026-10-29 | Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is | |
CVE-2026-77029 |
medium | 4.6 | 0.0021 | 2026-10-29 | Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < | |
CVE-2026-76611 |
medium | 6.9 | 0.0050 | 2026-10-29 | Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gall | |
CVE-2026-77028 |
medium | 5.3 | 0.0041 | 2026-10-29 | Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redir | |
CVE-2026-66916 |
medium | 6.9 | 0.0043 | 2026-10-29 | Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Fo | |
CVE-2026-5093 |
medium | 4.3 | 0.0037 | 2026-10-29 | The GreenShift – Animation and Page Builder Blocks plugin for WordPress is vulnerable to u | |
CVE-2026-76600 |
medium | 6.9 | 0.0041 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7. | |
CVE-2026-76601 |
medium | 6.9 | 0.0041 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 - The o | |
CVE-2026-76603 |
medium | 6.9 | 0.0041 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fa | |
CVE-2026-76608 |
medium | 6.9 | 0.0041 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email addr | |
CVE-2026-76609 |
medium | 6.9 | 0.0041 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < | |
CVE-2026-8630 |
medium | 5.1 | 0.0026 | 2026-10-29 | justhtml before 1.12.0 (versions <= 1.11.0) contains a mutation cross-site scripting (mXSS | |
CVE-2026-78171 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by | |
CVE-2026-78201 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is | |
CVE-2026-78202 |
medium | 5.5 | 0.0050 | 2026-10-29 | A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function sa | |
CVE-2026-77993 |
medium | 5.3 | 0.0044 | 2026-10-29 | Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla ext | |
CVE-2026-78258 |
medium | 5.3 | 0.0031 | 2026-10-29 | Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions. | |
CVE-2026-75370 |
medium | 6.5 | 0.0036 | 2026-10-29 | An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader componen | |
CVE-2020-37268 |
medium | 6.8 | 0.0018 | 2026-10-29 | Print Assumptions does not report that a definition was produced while universe checking w | |
CVE-2026-72703 |
medium | 6.8 | 0.0018 | 2026-10-29 | The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform | |
CVE-2026-72704 |
medium | 6.8 | 0.0018 | 2026-10-29 | The guard checker in Rocq Prover does not recheck the recursive tree representation of an | |
CVE-2026-72705 |
medium | 6.8 | 0.0018 | 2026-10-29 | The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's | |
CVE-2026-72711 |
medium | 6.8 | 0.0018 | 2026-10-29 | The Lean 4 kernel does not check that the body of an opaque declaration is closed. environ | |
CVE-2026-72714 |
medium | 6.8 | 0.0018 | 2026-10-29 | Rocq Prover does not restore the universe graph's copy of the universe checking flag when | |
CVE-2026-81028 |
medium | 6.9 | 0.0052 | 2026-10-29 | ZLMediaKit confines the downloadFile API to a configured set of root directories with a pr | |
CVE-2025-70340 |
medium | 6.5 | 0.0031 | 2026-10-29 | A Broken Access Control vulnerability exists in ThingsBoard Professional Edition (PE) 4.21 | |
CVE-2026-58616 |
medium | 4.4 | 0.0029 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-62904 |
medium | 5.4 | 0.0039 | 2026-10-29 | Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-66323 |
medium | 5.4 | 0.0041 | 2026-10-29 | Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based | |
CVE-2026-66324 |
medium | 6.5 | 0.0092 | 2026-10-29 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unautho | |
CVE-2026-66798 |
medium | 4.3 | 0.0079 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2024-58379 |
medium | 6.9 | 0.0042 | 2026-10-29 | nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in e | |
CVE-2025-63607 |
medium | 6.1 | 0.0026 | 2026-10-29 | TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the applica | |
CVE-2024-3773 |
medium | 5.9 | 0.0024 | 2026-10-29 | The LiveJournal Shortcode WordPress plugin through 1.1.1 does not validate and escape some | |
CVE-2026-14255 |
medium | 5.5 | 0.0016 | 2026-10-29 | A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger | |
CVE-2026-18330 |
medium | 6.1 | 0.0033 | 2026-10-29 | A hard-coded cryptographic key vulnerability exists in TP-Link RE305 V3 and Archer C7 V5. | |
CVE-2026-86332 |
medium | 6.5 | 0.0042 | 2026-10-29 | A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route |