Browse All CVEs
10,815 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-17491 |
medium | 5.4 | 0.0017 | 2026-10-29 | IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass secu | |
CVE-2026-111932 |
medium | 4.8 | 0.0017 | 2026-10-29 | Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 | |
CVE-2026-111933 |
medium | 6.3 | 0.0022 | 2026-10-29 | Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 | |
CVE-2026-111934 |
medium | 6.3 | 0.0012 | 2026-10-29 | Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress midd | |
CVE-2026-111869 |
medium | 5.5 | 0.0053 | 2026-10-29 | A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown func | |
CVE-2026-111873 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b1 | |
CVE-2026-112020 |
medium | 6.9 | 0.0019 | 2026-10-29 | LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getF | |
CVE-2026-112049 |
medium | 6.7 | 0.0015 | 2026-10-29 | Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in install_arc | |
CVE-2026-112054 |
medium | 6.8 | 0.0018 | 2026-10-29 | Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that a | |
CVE-2026-112059 |
medium | 6.9 | 0.0018 | 2026-10-29 | libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record | |
CVE-2026-112077 |
medium | 6.3 | 0.0029 | 2026-10-29 | A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. This issue affects the func | |
CVE-2026-112091 |
medium | 5.5 | 0.0031 | 2026-10-29 | A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b36131 | |
CVE-2026-67249 |
medium | 5.4 | 0.0019 | 2026-10-29 | A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. A v | |
CVE-2026-112104 |
medium | 6.9 | 0.0063 | 2026-10-29 | A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is | |
CVE-2026-112141 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf | |
CVE-2026-111883 |
medium | 5.3 | 0.0019 | 2026-10-29 | Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remo | |
CVE-2026-111936 |
medium | 5.3 | 0.0026 | 2026-10-29 | Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability beca | |
CVE-2026-112145 |
medium | 5.5 | 0.0043 | 2026-10-29 | A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This | |
CVE-2026-112268 |
medium | 5.3 | 0.0032 | 2026-10-29 | sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerabi | |
CVE-2026-112273 |
medium | 6.9 | 0.0056 | 2026-10-29 | libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name | |
CVE-2026-112283 |
medium | 6.8 | 0.0018 | 2026-10-29 | VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability | |
CVE-2026-112293 |
medium | 5.3 | 0.0018 | 2026-10-29 | BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing authorization vulnerab | |
CVE-2026-112294 |
medium | 5.3 | 0.0020 | 2026-10-29 | FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionSer | |
CVE-2026-112295 |
medium | 5.3 | 0.0026 | 2026-10-29 | FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authen | |
CVE-2026-112150 |
medium | 5.5 | 0.0026 | 2026-10-29 | A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7 | |
CVE-2026-112329 |
medium | 5.3 | 0.0018 | 2026-10-29 | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerabili | |
CVE-2026-109433 |
medium | 6.0 | 0.0043 | 2026-10-29 | Camunda 7.24.0 before 7.24.16 and 7.23.0 before 7.23.17 contains an authorization bypass v | |
CVE-2026-111056 |
medium | 6.9 | 0.0029 | 2026-10-29 | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8 | |
CVE-2025-7043 |
medium | 5.4 | 0.0018 | 2026-10-29 | The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh tok | |
CVE-2026-111063 |
medium | 6.3 | 0.0023 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3 | |
CVE-2026-111750 |
medium | 6.3 | 0.0038 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3 | |
CVE-2026-11828 |
medium | 5.9 | 0.0025 | 2026-10-29 | IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle acces | |
CVE-2026-11829 |
medium | 6.5 | 0.0024 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service due to improper | |
CVE-2026-11831 |
medium | 5.4 | 0.0020 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a limited denial of service and obta | |
CVE-2026-12155 |
medium | 6.5 | 0.0026 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service by sending speci | |
CVE-2026-12343 |
medium | 6.5 | 0.0024 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service due to improper | |
CVE-2026-12350 |
medium | 6.5 | 0.0026 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service by sending a spe | |
CVE-2026-19336 |
medium | 4.8 | 0.0020 | 2026-10-29 | A vulnerability was found in Pimzino spec-workflow-mcp up to 2.2.6. This issue affects the | |
CVE-2026-19342 |
medium | 5.5 | 0.0067 | 2026-10-29 | A vulnerability was detected in code-projects Task Management System 1.0. Affected is an u | |
CVE-2026-19343 |
medium | 5.5 | 0.0043 | 2026-10-29 | A flaw has been found in code-projects Task Management System 1.0. Affected by this vulner | |
CVE-2026-19344 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability has been found in code-projects Task Management System 1.0. Affected by th | |
CVE-2026-19345 |
medium | 5.5 | 0.0055 | 2026-10-29 | A vulnerability was found in code-projects Task Management System 1.0. This affects an unk | |
CVE-2026-19350 |
medium | 5.3 | 0.0026 | 2026-10-29 | A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail | |
CVE-2026-19351 |
medium | 5.5 | 0.0053 | 2026-10-29 | A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected | |
CVE-2026-19354 |
medium | 5.3 | 0.0032 | 2026-10-29 | A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09 | |
CVE-2026-19355 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function Mod | |
CVE-2026-19356 |
medium | 5.5 | 0.0048 | 2026-10-29 | A vulnerability was identified in MingSoft MCMS up to 3.0.6. This impacts an unknown funct | |
CVE-2026-19357 |
medium | 5.5 | 0.0048 | 2026-10-29 | A security flaw has been discovered in MingSoft MCMS up to 3.0.6. Affected is an unknown f | |
CVE-2026-19358 |
medium | 5.3 | 0.0035 | 2026-10-29 | A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerab | |
CVE-2026-19359 |
medium | 5.1 | 0.0038 | 2026-10-29 | A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected |