Browse All CVEs
10,814 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-52167 |
medium | 6.2 | 0.0013 | 2026-10-29 | A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers | |
CVE-2026-77468 |
medium | 6.9 | 0.0037 | 2026-10-29 | Lychee is a free, open-source photo-management tool. Prior to 7.7.0, GET /docs/api exposes | |
CVE-2026-78850 |
medium | 5.0 | 0.0033 | 2026-10-29 | An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via t | |
CVE-2026-54683 |
medium | 6.5 | 0.0042 | 2026-10-29 | NL Portal Backend Libraries provide backend components for Dutch government portals that i | |
CVE-2026-61702 |
medium | 5.3 | 0.0042 | 2026-10-29 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operatin | |
CVE-2026-110875 |
medium | 6.9 | 0.0014 | 2026-10-29 | AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ks | |
CVE-2026-111124 |
medium | 6.9 | 0.0024 | 2026-10-29 | CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcomp | |
CVE-2026-111129 |
medium | 6.8 | 0.0013 | 2026-10-29 | Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulne | |
CVE-2026-111134 |
medium | 6.9 | 0.0013 | 2026-10-29 | libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_f | |
CVE-2026-111139 |
medium | 6.8 | 0.0013 | 2026-10-29 | NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_ | |
CVE-2026-111144 |
medium | 6.8 | 0.0013 | 2026-10-29 | libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansil | |
CVE-2026-111147 |
medium | 6.9 | 0.0013 | 2026-10-29 | Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libes | |
CVE-2026-111149 |
medium | 6.9 | 0.0013 | 2026-10-29 | FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability | |
CVE-2026-111154 |
medium | 6.9 | 0.0013 | 2026-10-29 | libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundF | |
CVE-2026-111159 |
medium | 6.9 | 0.0013 | 2026-10-29 | libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_ext | |
CVE-2026-111164 |
medium | 6.8 | 0.0013 | 2026-10-29 | UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amif | |
CVE-2026-57183 |
medium | 6.1 | 0.0030 | 2026-10-29 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth( | |
CVE-2026-62322 |
medium | 6.5 | 0.0015 | 2026-10-29 | Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the | |
CVE-2024-58397 |
medium | 6.9 | 0.0020 | 2026-10-29 | MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters() tha | |
CVE-2026-111269 |
medium | 6.9 | 0.0024 | 2026-10-29 | libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_st | |
CVE-2026-111274 |
medium | 6.8 | 0.0020 | 2026-10-29 | unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() i | |
CVE-2026-111332 |
medium | 6.3 | 0.0035 | 2026-10-29 | OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows | |
CVE-2026-19076 |
medium | 4.9 | 0.0020 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8 | |
CVE-2026-19600 |
medium | 4.9 | 0.0024 | 2026-10-29 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.1 | |
CVE-2026-19621 |
medium | 6.5 | 0.0026 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8 | |
CVE-2026-110287 |
medium | 4.3 | 0.0019 | 2026-10-29 | Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and ear | |
CVE-2026-110804 |
medium | 4.3 | 0.0018 | 2026-10-29 | Improperly controlled modification of JIT elevation settings in PAM checkout in Devolution | |
CVE-2026-110806 |
medium | 6.5 | 0.0020 | 2026-10-29 | Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier | |
CVE-2025-52097 |
medium | 5.4 | 0.0033 | 2026-10-29 | 1 PoC | Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an a |
CVE-2026-102923 |
medium | 5.4 | 0.0027 | 2026-10-29 | SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior | |
CVE-2026-55862 |
medium | 6.5 | 0.0046 | 2026-10-29 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2. | |
CVE-2026-57446 |
medium | 5.3 | 0.0040 | 2026-10-29 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols incl | |
CVE-2026-59962 |
medium | 6.5 | 0.0034 | 2026-10-29 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | |
CVE-2026-62362 |
medium | 4.9 | 0.0034 | 2026-10-29 | PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using | |
CVE-2026-111603 |
medium | 5.3 | 0.0032 | 2026-10-29 | PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController | |
CVE-2026-111618 |
medium | 6.9 | 0.0043 | 2026-10-29 | CoAI (Chat Nio) through 4.0.0 contains an unauthenticated path traversal vulnerability in | |
CVE-2026-111623 |
medium | 6.3 | 0.0046 | 2026-10-29 | Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability th | |
CVE-2026-111648 |
medium | 5.1 | 0.0038 | 2026-10-29 | BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that a | |
CVE-2026-111653 |
medium | 6.9 | 0.0045 | 2026-10-29 | 53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthen | |
CVE-2026-111658 |
medium | 5.1 | 0.0032 | 2026-10-29 | SiteServer SSCMS through 7.4.0 contains an authorization bypass vulnerability in ChannelsC | |
CVE-2026-111668 |
medium | 5.3 | 0.0029 | 2026-10-29 | AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/effic | |
CVE-2026-111678 |
medium | 4.8 | 0.0022 | 2026-10-29 | Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo an | |
CVE-2026-111683 |
medium | 5.3 | 0.0029 | 2026-10-29 | Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allow | |
CVE-2025-55640 |
medium | 5.5 | 0.0019 | 2026-10-29 | A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box | |
CVE-2025-55653 |
medium | 5.5 | 0.0018 | 2026-10-29 | GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_parse_lfra | |
CVE-2026-107674 |
medium | 4.4 | 0.0006 | 2026-10-29 | IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate M | |
CVE-2026-17073 |
medium | 5.5 | 0.0017 | 2026-10-29 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information | |
CVE-2026-17275 |
medium | 5.3 | 0.0019 | 2026-10-29 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipul | |
CVE-2026-17488 |
medium | 6.5 | 0.0024 | 2026-10-29 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass securit | |
CVE-2026-17491 |
medium | 5.4 | 0.0017 | 2026-10-29 | IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass secu |