Search
6,058 CVEs · Medium severity
CVEs (6,058, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 351–375 of 6,058 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-20019 | MEDIUM | 5.8 | 2026-10-21 | Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 De… | |
| CVE-2026-20011 | MEDIUM | 5.8 | 2026-10-21 | Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection… | |
| CVE-2026-114261 | MEDIUM | 7.3 | 2026-10-21 | A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function index/store/update/destroy of the fi… | |
| CVE-2026-114260 | MEDIUM | 6.5 | 2026-10-21 | A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the function delete_folder… | |
| CVE-2026-114259 | MEDIUM | 7.3 | 2026-10-21 | A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function save_files of the file admin_class.p… | |
| CVE-2026-114258 | MEDIUM | 7.3 | 2026-10-21 | A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of… | |
| CVE-2026-114121 | MEDIUM | Patched | 5.4 | 2026-10-21 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, reque… |
| CVE-2026-113800 | MEDIUM | Patched | 5.4 | 2026-10-21 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, hid a… |
| CVE-2026-113799 | MEDIUM | 5.3 | 2026-10-21 | Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 expose the correct Slack request HMAC when signature ve… | |
| CVE-2026-113798 | MEDIUM | Patched | 5.4 | 2026-10-21 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13, poin… |
| CVE-2026-113796 | MEDIUM | Patched | 4.2 | 2026-10-21 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.6, Elect… |
| CVE-2026-114479 | MEDIUM | 5.8 | 2026-10-21 | Not failing securely in the anti-virus attachment-stripping action of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have a m… | |
| CVE-2026-114478 | MEDIUM | 5.9 | 2026-10-21 | Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mai… | |
| CVE-2026-114477 | MEDIUM | 4.3 | 2026-10-21 | Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote authenticated user whose credential is confined to nam… | |
| CVE-2026-114475 | MEDIUM | 6.5 | 2026-10-21 | Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confine… | |
| CVE-2026-114474 | MEDIUM | 5.9 | 2026-10-21 | Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated a… | |
| CVE-2026-114473 | MEDIUM | 5.0 | 2026-10-21 | Incorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robot hMailServer 6.2.1 through 6.3.6 allows a remote attacker to relay mail through the server … | |
| CVE-2026-114471 | MEDIUM | Patched | 4.7 | 2026-10-21 | Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a local user who can read the server's log… |
| CVE-2026-114470 | MEDIUM | 5.3 | 2026-10-21 | Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to make an authenticated user's browser perform a s… | |
| CVE-2026-114462 | MEDIUM | Patched | — | 2026-10-21 | Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before 36.6 and from 37.1 before 37.2. |
| CVE-2026-114257 | MEDIUM | 7.3 | 2026-10-21 | A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the fun… | |
| CVE-2026-114256 | MEDIUM | 7.3 | 2026-10-21 | A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function save_folder/delete_folder/de… | |
| CVE-2026-114255 | MEDIUM | 7.3 | 2026-10-21 | A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function save_user of the file … | |
| CVE-2026-114254 | MEDIUM | 7.3 | 2026-10-21 | A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file admin_cla… | |
| CVE-2026-113795 | MEDIUM | Patched | — | 2026-10-21 | pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around… |