Search
4,429 CVEs · Low severity
CVEs (4,429, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 276–300 of 4,429 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-112290 | LOW | Patched | 4.7 | 2026-10-19 | Intelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 contains a DOM-based cross-site scripting vulnerability in ic-tree-item tha… |
| CVE-2026-112288 | LOW | Patched | 3.3 | 2026-10-19 | Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding.… |
| CVE-2026-112146 | LOW | 7.4 | 2026-10-19 | A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The … | |
| CVE-2026-111935 | LOW | 2.6 | 2026-10-19 | NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced… | |
| CVE-2026-112140 | LOW | 6.3 | 2026-10-19 | A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function _get_lib_module of the file python/mlc_chat… | |
| CVE-2026-112138 | LOW | 4.7 | 2026-10-19 | A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class… | |
| CVE-2026-112108 | LOW | 6.3 | 2026-10-19 | A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/gguf/gguf.cpp of the component Stri… | |
| CVE-2026-112107 | LOW | 6.3 | 2026-10-19 | A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetens… | |
| CVE-2026-112102 | LOW | 6.3 | 2026-10-19 | A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component C… | |
| CVE-2026-112101 | LOW | 4.3 | 2026-10-19 | A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected element is an unknown function of the file /BlackBeltTechnology/pi-agent-… | |
| CVE-2026-112100 | LOW | 5.5 | 2026-10-19 | A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.__init__ of the file deeppavlov/models/preprocessors/multi… | |
| CVE-2026-112098 | LOW | 6.3 | 2026-10-19 | A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Referen… | |
| CVE-2026-112096 | LOW | 3.5 | 2026-10-19 | A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactions_handler.php?action=save_purchas… | |
| CVE-2026-112095 | LOW | 3.5 | 2026-10-19 | A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/products_handler.php?action=save of the component Product Manage… | |
| CVE-2026-112094 | LOW | 5.5 | 2026-10-19 | A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml_load_data of the file mxml-file.c. The manipulation leads to us… | |
| CVE-2026-112093 | LOW | 4.3 | 2026-10-19 | A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The impacted element is an unknown function o… | |
| CVE-2026-112092 | LOW | 4.3 | 2026-10-19 | A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is the function echo of the file … | |
| CVE-2026-112090 | LOW | 6.3 | 2026-10-19 | A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the fun… | |
| CVE-2026-91831 | LOW | Patched | 3.8 | 2026-10-19 | The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name setting before using it in e-mail headers, allo… |
| CVE-2026-112089 | LOW | 4.7 | 2026-10-19 | A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnera… | |
| CVE-2026-112088 | LOW | 6.3 | 2026-10-19 | A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This affects the functio… | |
| CVE-2026-112087 | LOW | 6.3 | 2026-10-19 | A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file confirm.php. This manipulation of the… | |
| CVE-2026-110034 | LOW | Patched | 3.7 | 2026-10-19 | The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an un… |
| CVE-2026-112086 | LOW | 6.3 | 2026-10-19 | A vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the file espnet3/publication/inference_model.py of the component Inference … | |
| CVE-2026-112081 | LOW | 6.3 | 2026-10-19 | A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.load of the file plugins/hanlp_common/hanlp_common/reflection.py of the … |