Search
17,826 CVEs · Low severity
CVEs (17,826, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 251–275 of 17,826 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-86933 | LOW | Patched | 3.3 | 2026-10-20 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's… |
| CVE-2026-86874 | LOW | Patched | 3.3 | 2026-10-20 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination. |
| CVE-2026-84547 | LOW | Patched | 3.5 | 2026-10-20 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in ph… |
| CVE-2026-84490 | LOW | Patched | 2.0 | 2026-10-20 | This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to … |
| CVE-2026-112372 | LOW | 6.6 | 2026-10-19 | A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName cause… | |
| CVE-2026-112358 | LOW | 4.1 | 2026-10-19 | A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability affects the function get_img_from_url of the file ApiB… | |
| CVE-2026-112302 | LOW | 6.3 | 2026-10-19 | A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file src/Readers/ArchiveZip.php of the component Ex… | |
| CVE-2026-112299 | LOW | 4.3 | 2026-10-19 | A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of the file src/pages/Account/AlbumEd… | |
| CVE-2026-112769 | LOW | Patched | — | 2026-10-19 | Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level permissions of the _Session class when creating sessions. An… |
| CVE-2026-112297 | LOW | 4.3 | 2026-10-19 | A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the function LLMClient.chat of the file blueprints/api/llm.py of the component L… | |
| CVE-2026-112254 | LOW | 4.3 | 2026-10-19 | A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function _fetch_html of the file locations/services/property_url_impo… | |
| CVE-2026-111766 | LOW | Patched | 3.7 | 2026-10-19 | markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur inside a paragraph, attacker-con… |
| CVE-2026-112251 | LOW | 4.3 | 2026-10-19 | A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRequest of the file apps/clawhostgo/src/main/services/reverseProxy.ts of t… | |
| CVE-2026-3303 | LOW | 3.7 | 2026-10-19 | IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limite… | |
| CVE-2026-1501 | LOW | 3.7 | 2026-10-19 | IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation. | |
| CVE-2026-6930 | LOW | 3.7 | 2026-10-19 | IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. | |
| CVE-2026-12669 | LOW | Patched | 3.1 | 2026-10-19 | IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request … |
| CVE-2026-12660 | LOW | Patched | 2.7 | 2026-10-19 | IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation. |
| CVE-2026-112195 | LOW | 4.7 | 2026-10-19 | A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the comp… | |
| CVE-2026-112193 | LOW | 3.7 | 2026-10-19 | A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webkul/security/src/Filament/Resources/UserResource/Schem… | |
| CVE-2026-112159 | LOW | 5.5 | 2026-10-19 | A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of… | |
| CVE-2026-111749 | LOW | Patched | — | 2026-10-19 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domain cookie can be removed by a sub… |
| CVE-2024-4412 | LOW | 2.7 | 2026-10-19 | The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code. This can lead to the execution… | |
| CVE-2026-112157 | LOW | 3.1 | 2026-10-19 | A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted element is the function requireAdminWrite of the file Memory/src/server/http.t… | |
| CVE-2026-111046 | LOW | Patched | — | 2026-10-19 | FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasManagePermission fails open for inactive non-core modules because its early… |