Search
172,839 CVEs · Medium severity
CVEs (172,839, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 376–400 of 172,839 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-96655 | MEDIUM | Patched | 4.3 | 2026-09-23 | Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. |
| CVE-2026-96654 | MEDIUM | Patched | 6.5 | 2026-09-23 | Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply the… |
| CVE-2026-96653 | MEDIUM | 6.5 | 2026-10-10 | The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'display_name' Profile Field (Second-Order) in all versions up to, and including, 1.… | |
| CVE-2026-96652 | MEDIUM | Patched | 4.3 | 2026-09-23 | Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and fo… |
| CVE-2026-96651 | MEDIUM | Patched | 6.5 | 2026-09-23 | Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path traversal via '/system/agents/media/get… |
| CVE-2026-96648 | MEDIUM | 6.4 | 2026-10-10 | The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions u… | |
| CVE-2026-96647 | MEDIUM | 6.4 | 2026-10-02 | The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsd[remark]' Parameter in al… | |
| CVE-2026-96641 | MEDIUM | Patched | 6.5 | 2026-10-21 | Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive glyph advances against INT_MAX but does not check neg… |
| CVE-2026-96638 | MEDIUM | Patched | 6.5 | 2026-10-21 | Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits crafted RLE BMP delta escapes and absolute-mode run… |
| CVE-2026-96636 | MEDIUM | Patched | 6.5 | 2026-10-21 | Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() reparse later MPO or DCX frames and replace self._size without rerunning Im… |
| CVE-2026-96628 | MEDIUM | Patched | 4.3 | 2026-10-16 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.11.0, AuthMiddleware.managerAuth accepts X-Arcane-Agent-Token credentials a… |
| CVE-2026-96614 | MEDIUM | 5.4 | 2026-10-15 | "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-a… | |
| CVE-2026-96611 | MEDIUM | Patched | 6.9 | 2026-09-23 | FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed i… |
| CVE-2026-96606 | MEDIUM | 5.3 | 2026-09-23 | A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file Mifi_config.bin of the component Configuration Backup… | |
| CVE-2026-96600 | MEDIUM | 5.5 | 2026-09-23 | Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate request-controlled identifiers and administrator-supplie… | |
| CVE-2026-96599 | MEDIUM | 5.9 | 2026-09-23 | Isotope eCommerce through 2.9.10 derives order identifiers from uniqid() instead of a cryptographically secure source, allowing unauthenticated attackers to guess identifie… | |
| CVE-2026-96596 | MEDIUM | Patched | — | 2026-10-14 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module), hexpm hex (mix_hex_erl_tar … |
| CVE-2026-96594 | MEDIUM | Patched | 6.1 | 2026-10-06 | The Gitea API endpoint `GET /api/v1/repos/{owner}/{repo}/media/{filepath}` wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without t… |
| CVE-2026-96589 | MEDIUM | Patched | 4.3 | 2026-10-06 | When a private repository is transferred to a user who lacks access, Gitea grants that recipient temporary read access as a collaborator so they can review the repository. … |
| CVE-2026-96582 | MEDIUM | 4.9 | 2026-10-20 | A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host walks that sequence by advancing over each header and… | |
| CVE-2026-96574 | MEDIUM | 6.4 | 2026-10-10 | The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to St… | |
| CVE-2026-96563 | MEDIUM | 6.4 | 2026-10-10 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stm_f_s' parameter in all versions up to… | |
| CVE-2026-96562 | MEDIUM | 6.5 | 2026-10-16 | The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software … | |
| CVE-2026-9656 | MEDIUM | 4.3 | 2026-07-17 | The HubSpot All-In-One Marketing – Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.… | |
| CVE-2026-96551 | MEDIUM | 4.3 | 2026-09-23 | A vulnerability was determined in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. Impacted is an unknown function of the file ssm_pro/src/main/java/cn/s… |