Search
913 CVEs · Low severity
CVEs (913, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 226–250 of 913 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-113657 | LOW | Patched | 3.7 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From sanitize-html 2.17.7 until 2.18… |
| CVE-2026-113651 | LOW | Patched | 3.3 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library. Prior to uploadfs 1.28.0, attacker-controlled paths that reach … |
| CVE-2026-113648 | LOW | Patched | 3.1 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, the API endpoint POST /api/v1/@apostrophecms/import-export/cl… |
| CVE-2026-113505 | LOW | 4.3 | 2026-10-20 | A flaw has been found in aaPanel up to 8.25.0. Impacted is the function send_file of the file BTPanel/routes/v2.py of the component Download Endpoint. Executing a manipulat… | |
| CVE-2026-90799 | LOW | Patched | — | 2026-10-20 | Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to cause a denial of service via memory exhaustion. … |
| CVE-2026-90798 | LOW | Patched | — | 2026-10-20 | A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of servi… |
| CVE-2026-113596 | LOW | Patched | 3.1 | 2026-10-20 | Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users' project data via the publishedBuilds and findMa… |
| CVE-2026-112945 | LOW | Patched | — | 2026-10-20 | Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, applications using custom middleware are vulnerable when they pass an u… |
| CVE-2026-113411 | LOW | 6.3 | 2026-10-20 | A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window O… | |
| CVE-2026-113397 | LOW | 7.4 | 2026-10-20 | A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequest_certificate of the file /cgi-bin/mainfunction.cgi … | |
| CVE-2026-112941 | LOW | Patched | 3.3 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and AsyncSoftReadWriteLock cache a successful check of the <path>.rw lock… |
| CVE-2026-112912 | LOW | Patched | 2.5 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 3.32.6 until 4.2.1, SoftFileLock can follow a swapped symbolic link during the conditional os.access writabili… |
| CVE-2026-113396 | LOW | 7.4 | 2026-10-20 | A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_table of the file /cgi-bin/mainfunction.cgi of the co… | |
| CVE-2026-113395 | LOW | 7.4 | 2026-10-20 | A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgiEscape of the file /cgi-bin/mainfunction.cgi of the … | |
| CVE-2026-113394 | LOW | 7.4 | 2026-10-20 | A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the file /cgi-bin/mainfunction.cgi. The manipulation of… | |
| CVE-2026-113393 | LOW | 6.3 | 2026-10-20 | A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component… | |
| CVE-2026-113392 | LOW | 7.4 | 2026-10-20 | A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the component Apmuplo… | |
| CVE-2026-113388 | LOW | 4.3 | 2026-10-20 | A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the … | |
| CVE-2026-113385 | LOW | 5.3 | 2026-10-20 | A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Class.forName of the file ToggleGeneric.java. The manip… | |
| CVE-2026-113384 | LOW | 4.3 | 2026-10-20 | A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of the file /v5.0/social. Executing a manipulation of the argument state can … | |
| CVE-2026-113383 | LOW | 4.3 | 2026-10-20 | A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file /v5.0/webapps/pages/public/Login. Performing a manipulation of the ar… | |
| CVE-2026-113382 | LOW | 6.3 | 2026-10-20 | A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/api_plugins.php o… | |
| CVE-2026-113378 | LOW | 5.3 | 2026-10-20 | A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Search Tool. The… | |
| CVE-2026-110725 | LOW | Patched | 3.7 | 2026-10-20 | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, when seriali… |
| CVE-2026-110095 | LOW | Patched | 3.7 | 2026-10-20 | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, the normaliz… |