Search
172,839 CVEs · Medium severity
CVEs (172,839, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 326–350 of 172,839 (capped at 500)
| CVE ID | Severity ↑ | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105936 | MEDIUM | Patched | — | 2026-10-21 | The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed on the functions worker: the worker connectors endpoin… |
| CVE-2026-92205 | MEDIUM | 6.1 | 2026-10-21 | BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected insta… | |
| CVE-2026-114491 | MEDIUM | Patched | 5.3 | 2026-10-21 | pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to images referenced inside SVG content, allowing attackers to read blocked local files. A… |
| CVE-2026-114132 | MEDIUM | Patched | — | 2026-10-21 | Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves pages case-insensitively by default while Nitro matches server-side route-rule ke… |
| CVE-2026-114133 | MEDIUM | Patched | 5.4 | 2026-10-21 | Nuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the server-island renderer serializes raw useHeadSafe entry input into the island resp… |
| CVE-2026-114176 | MEDIUM | 4.3 | 2026-10-21 | Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… | |
| CVE-2026-114262 | MEDIUM | 7.3 | 2026-10-21 | A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file app/Http/Controllers/FileContr… | |
| CVE-2026-114263 | MEDIUM | 7.3 | 2026-10-21 | A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqli_query of the file individual_report_sear… | |
| CVE-2026-114128 | MEDIUM | Patched | 6.5 | 2026-10-21 | Astro is a web framework for content-driven websites. Prior to 7.3.2, Astro's JSX and MDX rendering pipeline treats string children of script and style elements as trusted … |
| CVE-2026-114129 | MEDIUM | Patched | 6.2 | 2026-10-21 | stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From 2.0.0 until 3.7.0, FlexAssembler compiles string and… |
| CVE-2026-114131 | MEDIUM | Patched | 6.5 | 2026-10-21 | Nuxt is an open-source web development framework for Vue.js. From 3.11.0 until 3.21.4 and 4.4.4, Nuxt compares route-rule keys with the raw request path while route resolut… |
| CVE-2026-112868 | MEDIUM | 4.3 | 2026-10-21 | Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P… | |
| CVE-2026-105930 | MEDIUM | Patched | — | 2026-10-21 | When package management is enabled, Pulsar Functions, Sources and Sinks can be registered or updated from a package stored in the Pulsar Packages Management Service by supp… |
| CVE-2026-105926 | MEDIUM | Patched | — | 2026-10-21 | The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and GetOrCreateSchema, which registers a ne… |
| CVE-2026-76497 | MEDIUM | 6.6 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive interna… | |
| CVE-2026-76487 | MEDIUM | 5.3 | 2026-10-21 | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an una… | |
| CVE-2026-76489 | MEDIUM | 5.8 | 2026-10-21 | Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the… | |
| CVE-2026-76435 | MEDIUM | 5.3 | 2026-10-21 | A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is… | |
| CVE-2026-76445 | MEDIUM | 5.3 | 2026-10-21 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine t… | |
| CVE-2026-76462 | MEDIUM | 5.5 | 2026-10-21 | A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to… | |
| CVE-2026-53986 | MEDIUM | 5.3 | 2026-10-21 | Girafit camera app (Android and iOS) version 1.9.1 and earlier, and Girafit camera devices, contain a hardcoded credentials vulnerability that allows attackers to obtain th… | |
| CVE-2026-20179 | MEDIUM | 5.8 | 2026-10-21 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine that could allow an unauthenticated, remote atta… | |
| CVE-2026-20197 | MEDIUM | 5.8 | 2026-10-21 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Det… | |
| CVE-2026-20218 | MEDIUM | 5.8 | 2026-10-21 | A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause … | |
| CVE-2026-20221 | MEDIUM | 5.8 | 2026-10-21 | Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could a… |