Browse All CVEs
10,719 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-72663 |
medium | 6.5 | 0.0047 | 2026-10-29 | Inefficient Algorithmic Complexity (CWE-407) in Kibana can lead to denial of service via I | |
CVE-2026-73039 |
medium | 5.3 | 0.0030 | 2026-10-29 | streama contains an insecure direct object reference vulnerability in ViewingStatusControl | |
CVE-2026-73489 |
medium | 4.3 | 0.0045 | 2026-10-29 | Russh is a Rust SSH client & server library. Prior to 0.62.4, an authenticated SSH client | |
CVE-2026-72814 |
medium | 6.3 | 0.0047 | 2026-10-29 | The actix-files crate (actix_files) before version 0.6.10 contains an information exposure | |
CVE-2026-71570 |
medium | 5.1 | 0.0041 | 2026-10-29 | Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4 | |
CVE-2026-16094 |
medium | 4.9 | 0.0058 | 2026-10-29 | The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPre | |
CVE-2026-49305 |
medium | 6.2 | 0.0011 | 2026-10-29 | Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful explo | |
CVE-2026-73851 |
medium | 6.1 | 0.0227 | 2026-10-29 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attac | |
CVE-2026-75049 |
medium | 6.5 | 0.0034 | 2026-10-29 | In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read | |
CVE-2026-75050 |
medium | 6.5 | 0.0106 | 2026-10-29 | In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via craft | |
CVE-2026-75052 |
medium | 4.4 | 0.0018 | 2026-10-29 | In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview | |
CVE-2026-75053 |
medium | 5.4 | 0.0024 | 2026-10-29 | In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener | |
CVE-2026-75054 |
medium | 6.3 | 0.0015 | 2026-10-29 | In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy | |
CVE-2026-75055 |
medium | 5.5 | 0.0015 | 2026-10-29 | In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files v | |
CVE-2026-75057 |
medium | 6.2 | 0.0017 | 2026-10-29 | In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to th | |
CVE-2026-75058 |
medium | 5.5 | 0.0015 | 2026-10-29 | In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings import | |
CVE-2026-75059 |
medium | 4.4 | 0.0018 | 2026-10-29 | In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible | |
CVE-2026-12519 |
medium | 5.0 | 0.0024 | 2026-10-29 | The WNC-M14A2A LTE-M modem driver mishandles unsolicited %NOTIFYEV: events in on_cmd_sockn | |
CVE-2026-12629 |
medium | 4.6 | 0.0023 | 2026-10-29 | The ARM PL011 UART driver in drivers/serial/uart_pl011.c fails to acknowledge receive erro | |
CVE-2026-12630 |
medium | 4.3 | 0.0026 | 2026-10-29 | Zephyr's 6LoWPAN IP Header Compression (IPHC) uncompression code contains an out-of-bounds | |
CVE-2026-68517 |
medium | 6.5 | 0.0046 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, the cors_ | |
CVE-2026-48053 |
medium | 5.8 | 0.0038 | 2026-10-29 | Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri A | |
CVE-2026-50771 |
medium | 6.1 | 0.0031 | 2026-10-29 | Cross Site Scripting vulnerability in Squirro Cognitive Search < 3.14.2 allows a remote at | |
CVE-2026-59894 |
medium | 6.2 | 0.0013 | 2026-10-29 | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse/filter | |
CVE-2026-68520 |
medium | 5.3 | 0.0040 | 2026-10-29 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, as_dict_s | |
CVE-2026-73424 |
medium | 6.5 | 0.0038 | 2026-10-29 | Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro | |
CVE-2026-63667 |
medium | 6.5 | 0.0046 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the imp | |
CVE-2026-63669 |
medium | 6.5 | 0.0031 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.32.0, the pa | |
CVE-2026-63670 |
medium | 6.1 | 0.0033 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. Prior to 2.17.6, saniti | |
CVE-2026-71486 |
medium | 4.3 | 0.0037 | 2026-10-29 | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the /v | |
CVE-2026-75012 |
medium | 5.7 | 0.0066 | 2026-10-29 | A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affe | |
CVE-2026-75013 |
medium | 5.7 | 0.0066 | 2026-10-29 | A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the f | |
CVE-2026-75014 |
medium | 5.5 | 0.0043 | 2026-10-29 | A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnera | |
CVE-2026-73560 |
medium | 6.5 | 0.0041 | 2026-10-29 | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the Mi | |
CVE-2026-75104 |
medium | 6.8 | 0.0029 | 2026-10-29 | Hugging Face Transformers fails to validate shard filenames in checkpoint index files, all | |
CVE-2026-75483 |
medium | 4.8 | 0.0017 | 2026-10-29 | powerlevel10k fails to neutralize control characters in the package.json version field whe | |
CVE-2026-75529 |
medium | 6.9 | 0.0044 | 2026-10-29 | Pandora is affected by a stored cross-site scripting vulnerability in the PDF download fun | |
CVE-2026-63178 |
medium | 6.5 | 0.0052 | 2026-10-29 | Onyx is an open-source AI platform. Prior to 4.3.0, Onyx Enterprise Edition's PATCH /manag | |
CVE-2026-64760 |
medium | 5.5 | 0.0016 | 2026-10-29 | An information leakage was addressed with additional validation. This issue is fixed in iO | |
CVE-2026-65329 |
medium | 5.9 | 0.0024 | 2026-10-29 | An authentication issue was addressed with improved state management. This issue is fixed | |
CVE-2026-65339 |
medium | 5.0 | 0.0015 | 2026-10-29 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.11 and i | |
CVE-2026-75079 |
medium | 5.5 | 0.0043 | 2026-10-29 | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Th | |
CVE-2026-75080 |
medium | 5.5 | 0.0043 | 2026-10-29 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling Sy | |
CVE-2026-75089 |
medium | 5.5 | 0.0043 | 2026-10-29 | A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by | |
CVE-2026-75151 |
medium | 5.3 | 0.0022 | 2026-10-29 | A vulnerability has been found in SourceCodester Onlne Examination & Learning Management S | |
CVE-2026-43971 |
medium | 6.3 | 0.0052 | 2026-10-29 | Improper Encoding or Escaping of Output vulnerability in ninenines cowlib allows Link head | |
CVE-2026-19447 |
medium | 5.4 | 0.0023 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-5224 |
medium | 5.7 | 0.0017 | 2026-10-29 | Cleartext storage of sensitive information vulnerability in Kriptok Crypto and Information | |
CVE-2026-74903 |
medium | 5.3 | 0.0025 | 2026-10-29 | SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lut | |
CVE-2026-74905 |
medium | 6.9 | 0.0039 | 2026-10-29 | SiYuan before v3.7.4 contains a server-side request forgery (SSRF) vulnerability in the is |