Search
17,826 CVEs · Low severity
CVEs (17,826, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 251–275 of 17,826 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-90568 | LOW | 3.5 | 2026-09-13 | A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2. This affects the function BlogSortServiceImpl.addBlogSort of the file mogu_web/src/main/resources/templates/… | |
| CVE-2026-90567 | LOW | 3.5 | 2026-09-13 | A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/src/components… | |
| CVE-2026-90564 | LOW | 3.5 | 2026-09-13 | A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue… | |
| CVE-2026-90563 | LOW | 3.5 | 2026-09-13 | A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes c… | |
| CVE-2026-90529 | LOW | 3.5 | 2026-09-13 | A vulnerability has been found in DataEase up to 2.10.25/2.10.26. Affected by this issue is the function buildTooltip of the file core/core-frontend/src/views/chart/compone… | |
| CVE-2026-90528 | LOW | 3.5 | 2026-09-13 | A flaw has been found in TDuckApp tduck-platform up to 5.3. Affected by this vulnerability is an unknown functionality of the file tduck-front/src/views/form/write/index.vu… | |
| CVE-2026-90508 | LOW | 3.4 | 2026-09-13 | A security flaw has been discovered in Chengdu Qilu Technology Ludashi 6.1026.4715.714. Affected by this vulnerability is the function MessageNotifyCallback in the library … | |
| CVE-2026-90503 | LOW | 2.3 | 2026-09-13 | A flaw has been found in Chengdu Qilu Technology Ludashi 6.1026.4715.714. The affected element is the function sub_11008 in the library ComputerZ_x64.sys. Executing a manip… | |
| CVE-2026-90502 | LOW | 3.5 | 2026-09-13 | A vulnerability was detected in stilleshan ServerStatus 1.0/2.0. Impacted is an unknown function of the file server/src/main.cpp of the component Stats Generation. Performi… | |
| CVE-2026-90497 | LOW | 3.5 | 2026-09-13 | A vulnerability was determined in Fengoffice Feng Office up to 3.11.13.11. Affected by this vulnerability is the function getTitle of the file application/views/task/add_ta… | |
| CVE-2026-90489 | LOW | 3.5 | 2026-09-13 | A vulnerability was identified in Xuxueli xxl-job up to 3.5.0. This vulnerability affects unknown code of the file /jobinfo/insert. Such manipulation of the argument name/a… | |
| CVE-2026-8981 | LOW | Patched | 3.5 | 2026-06-09 | The Custom Block Builder WordPress plugin before 4.3.0 does not consistently check the unfiltered_html capability across all paths that write to its block template code fi… |
| CVE-2026-89328 | LOW | Patched | 3.8 | 2026-09-16 | The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, … |
| CVE-2026-89327 | LOW | Patched | 3.8 | 2026-09-16 | The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board membe… |
| CVE-2026-89290 | LOW | 3.5 | 2026-10-08 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stor… | |
| CVE-2026-89162 | LOW | Patched | 2.9 | 2026-09-11 | In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe. |
| CVE-2026-89160 | LOW | Patched | 3.7 | 2026-09-11 | PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject. |
| CVE-2026-89156 | LOW | Patched | 2.9 | 2026-09-11 | PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data. |
| CVE-2026-89151 | LOW | Patched | 3.5 | 2026-09-11 | Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature. |
| CVE-2026-89008 | LOW | Patched | 2.7 | 2026-09-18 | The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform an authorization check on one of its appointment-retrieval actions, allowing us… |
| CVE-2026-89007 | LOW | Patched | 2.7 | 2026-09-18 | The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform a capability check in one of its appointment-deletion functions, allowing users… |
| CVE-2026-89004 | LOW | Patched | 2.7 | 2026-09-24 | The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, all… |
| CVE-2026-88849 | LOW | Patched | 2.7 | 2026-10-22 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.55 does not verify that a user targeted through its student-enrolment feature has any relationship to the … |
| CVE-2026-88844 | LOW | Patched | 2.7 | 2026-09-18 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its enrolled-student data, al… |
| CVE-2026-88842 | LOW | 3.3 | 2026-10-14 | A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocati… |