Search
2,007 CVEs · Low severity
CVEs (2,007, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 326–350 of 2,007 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-111993 | LOW | 3.3 | 2026-10-18 | A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/Admin… | |
| CVE-2026-111992 | LOW | 6.3 | 2026-10-18 | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of … | |
| CVE-2026-111991 | LOW | 6.3 | 2026-10-18 | A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.__init__ of the file models/common.py of the… | |
| CVE-2026-111987 | LOW | 4.3 | 2026-10-18 | A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function read_metadata_from_safetensors of the fi… | |
| CVE-2026-112050 | LOW | Patched | 3.1 | 2026-10-18 | Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHub… |
| CVE-2026-111986 | LOW | 6.3 | 2026-10-18 | A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function get_obj_from_str of the file modules/sd_models.py of the compo… | |
| CVE-2026-112004 | LOW | Patched | 3.1 | 2026-10-18 | Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a forei… |
| CVE-2026-111985 | LOW | 4.3 | 2026-10-18 | A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function read_metadata_from_safetensors of the file modules/sd_models.py of… | |
| CVE-2026-111984 | LOW | 4.3 | 2026-10-18 | A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function create_item_html of the file modules/ui_extra_networks.py of … | |
| CVE-2026-111942 | LOW | 4.3 | 2026-10-18 | A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument S… | |
| CVE-2026-111877 | LOW | 4.3 | 2026-10-18 | A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571. This affects an unknown part of the file search.php. Executing a … | |
| CVE-2026-111876 | LOW | 5.3 | 2026-10-18 | A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performi… | |
| CVE-2026-111875 | LOW | 4.7 | 2026-10-18 | A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveS… | |
| CVE-2026-111874 | LOW | 3.7 | 2026-10-18 | A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. This manipulation … | |
| CVE-2026-111868 | LOW | 6.3 | 2026-10-18 | A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pulsar-jms/src/main/java/com/datastax/oss/pulsar/jms/m… | |
| CVE-2026-111865 | LOW | 5.3 | 2026-10-17 | A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.p… | |
| CVE-2025-71435 | LOW | Patched | 4.2 | 2026-10-17 | Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after OIDC token expiry when no refresh token is iss… |
| CVE-2026-92431 | LOW | Patched | 3.7 | 2026-10-17 | The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of te… |
| CVE-2026-111602 | LOW | 3.7 | 2026-10-17 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,… | |
| CVE-2026-17591 | LOW | 3.6 | 2026-10-16 | A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when… | |
| CVE-2026-17275 | LOW | 3.7 | 2026-10-16 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied … | |
| CVE-2026-111714 | LOW | Patched | 3.1 | 2026-10-16 | tarteaucitron.js before 1.37.0 contains a regular expression denial of service vulnerability that allows attackers to block visitor pages by supplying unescaped cookie name… |
| CVE-2026-111628 | LOW | Patched | 5.0 | 2026-10-16 | 10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double unserializing distribut… |
| CVE-2026-111608 | LOW | 4.2 | 2026-10-16 | Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to delete other merchants' division receivers by ex… | |
| CVE-2026-109839 | LOW | 3.1 | 2026-10-16 | IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm. |