Browse All CVEs
10,751 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-47718 |
medium | 5.5 | 0.0046 | 2026-10-29 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. When `secureEnab | |
CVE-2026-71194 |
medium | 6.8 | 0.0052 | 2026-10-29 | In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when re | |
CVE-2026-17431 |
medium | 6.1 | 0.0095 | 2026-10-29 | PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of | |
CVE-2026-46688 |
medium | 6.9 | 0.0042 | 2026-10-29 | The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting room | |
CVE-2026-50544 |
medium | 6.3 | 0.0013 | 2026-10-29 | NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior t | |
CVE-2026-0293 |
medium | 5.6 | 0.0016 | 2026-10-29 | A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local atta | |
CVE-2026-0294 |
medium | 6.0 | 0.0017 | 2026-10-29 | A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent a | |
CVE-2026-0295 |
medium | 4.1 | 0.0011 | 2026-10-29 | A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locall | |
CVE-2026-0296 |
medium | 4.5 | 0.0026 | 2026-10-29 | Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app e | |
CVE-2026-0297 |
medium | 5.2 | 0.0060 | 2026-10-29 | A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that e | |
CVE-2026-0298 |
medium | 5.2 | 0.0066 | 2026-10-29 | An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider | |
CVE-2026-0299 |
medium | 5.9 | 0.0017 | 2026-10-29 | Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app en | |
CVE-2026-16458 |
medium | 5.9 | 0.0009 | 2026-10-29 | Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all vers | |
CVE-2026-16459 |
medium | 5.9 | 0.0009 | 2026-10-29 | Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library i | |
CVE-2026-19694 |
medium | 5.5 | 0.0013 | 2026-10-29 | TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service | |
CVE-2026-19695 |
medium | 5.5 | 0.0012 | 2026-10-29 | Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service | |
CVE-2026-19696 |
medium | 5.5 | 0.0012 | 2026-10-29 | Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows den | |
CVE-2026-11970 |
medium | 4.8 | 0.0016 | 2026-10-29 | This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint | |
CVE-2026-59502 |
medium | 5.3 | 0.0033 | 2026-10-29 | : Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP | |
CVE-2026-18368 |
medium | 6.0 | 0.0025 | 2026-10-29 | In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper | |
CVE-2026-45819 |
medium | 6.6 | 0.0051 | 2026-10-29 | baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on inv | |
CVE-2026-73488 |
medium | 6.0 | 0.0037 | 2026-10-29 | Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in | |
CVE-2026-73603 |
medium | 6.3 | 0.0033 | 2026-10-29 | Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to- | |
CVE-2026-73605 |
medium | 6.9 | 0.0032 | 2026-10-29 | SiYuan versions before v3.7.4 contain a path traversal vulnerability in the getUniqueFilen | |
CVE-2026-73606 |
medium | 6.9 | 0.0032 | 2026-10-29 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/ | |
CVE-2026-73607 |
medium | 6.9 | 0.0025 | 2026-10-29 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/ | |
CVE-2026-73609 |
medium | 6.9 | 0.0032 | 2026-10-29 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBo | |
CVE-2026-73610 |
medium | 6.9 | 0.0026 | 2026-10-29 | SiYuan before v3.7.4 contains an information disclosure vulnerability in the local storage | |
CVE-2026-73621 |
medium | 5.3 | 0.0036 | 2026-10-29 | GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() | |
CVE-2026-73628 |
medium | 5.3 | 0.0026 | 2026-10-29 | Serendipity versions >= 2.3.5 and <= 2.6.0 contain a reflected cross-site scripting vulner | |
CVE-2026-19716 |
medium | 5.1 | 0.0047 | 2026-10-29 | Stored Cross-site Scripting (CWE-79) in the user management component in maalfer Pentestif | |
CVE-2026-21832 |
medium | 4.3 | 0.0029 | 2026-10-29 | HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML i | |
CVE-2026-27537 |
medium | 6.5 | 0.0022 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions. | |
CVE-2026-27999 |
medium | 6.5 | 0.0034 | 2026-10-29 | Subscriber Broken Access Control in Tourfic <= 2.23.1 versions. | |
CVE-2026-28155 |
medium | 6.5 | 0.0033 | 2026-10-29 | Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions. | |
CVE-2026-28159 |
medium | 6.5 | 0.0037 | 2026-10-29 | Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions. | |
CVE-2026-28174 |
medium | 6.5 | 0.0037 | 2026-10-29 | Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions. | |
CVE-2026-28181 |
medium | 6.5 | 0.0034 | 2026-10-29 | Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions. | |
CVE-2026-28182 |
medium | 6.5 | 0.0022 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions. | |
CVE-2026-61978 |
medium | 6.5 | 0.0033 | 2026-10-29 | Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter (Piraeus B | |
CVE-2026-66464 |
medium | 6.5 | 0.0027 | 2026-10-29 | Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions. | |
CVE-2026-66467 |
medium | 6.5 | 0.0022 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions. | |
CVE-2026-66471 |
medium | 6.5 | 0.0022 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions. | |
CVE-2026-66654 |
medium | 6.0 | 0.0021 | 2026-10-29 | Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions. | |
CVE-2026-66660 |
medium | 6.5 | 0.0033 | 2026-10-29 | Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on <= 2.5.1 | |
CVE-2026-66687 |
medium | 6.5 | 0.0022 | 2026-10-29 | Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions. | |
CVE-2026-66689 |
medium | 6.3 | 0.0026 | 2026-10-29 | Unauthenticated Broken Access Control in Anti Spam and list cleaner – AcyChecker <= | |
CVE-2026-66693 |
medium | 6.5 | 0.0030 | 2026-10-29 | Subscriber Broken Access Control in Motors <= 1.4.113 versions. | |
CVE-2026-73340 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions. | |
CVE-2026-73344 |
medium | 5.9 | 0.0024 | 2026-10-29 | Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions. |