Search
17,816 CVEs · Low severity
EOL hidden · Show all products
CVEs (17,816, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 376–400 of 17,816 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-110810 | LOW | 2.8 | 2026-10-15 | A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp of the component Model Loader. Pe… | |
| CVE-2026-110809 | LOW | 4.3 | 2026-10-15 | A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sglang/srt/sessi… | |
| CVE-2026-110807 | LOW | 4.3 | 2026-10-14 | A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_stru… | |
| CVE-2026-110698 | LOW | 6.3 | 2026-10-14 | A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component M… | |
| CVE-2026-110695 | LOW | 6.3 | 2026-10-14 | A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors T… | |
| CVE-2026-64856 | LOW | Patched | 3.7 | 2026-10-14 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the s… |
| CVE-2026-110694 | LOW | 6.3 | 2026-10-14 | A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function get_tm_file_model of the file source/serializer/tmfile/tm2_serializer.c… | |
| CVE-2026-110689 | LOW | 5.3 | 2026-10-14 | A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component … | |
| CVE-2026-0317 | LOW | — | 2026-10-14 | A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS)… | |
| CVE-2026-0316 | LOW | — | 2026-10-14 | A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript pa… | |
| CVE-2026-0311 | LOW | — | 2026-10-14 | A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from h… | |
| CVE-2026-82153 | LOW | 2.2 | 2026-10-14 | Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could po… | |
| CVE-2026-103930 | LOW | Patched | 3.7 | 2026-10-14 | cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::open_stream in httplib.h accepts a caller-controlled path that reaches detail::write_… |
| CVE-2026-93637 | LOW | 3.7 | 2026-10-14 | An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through GraphQL … | |
| CVE-2026-77564 | LOW | Patched | 3.3 | 2026-10-14 | Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, talosctl support includes the auth field from resources/registryconfigs.cr… |
| CVE-2026-77572 | LOW | 3.3 | 2026-10-14 | VeraCrypt provides disk encryption with strong security based on TrueCrypt. In 1.26.29 and earlier, selected metadata IOCTL handlers in the VeraCrypt Windows veracrypt.sys … | |
| CVE-2026-49206 | LOW | Patched | 2.9 | 2026-10-14 | rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted size_t indexes to int before adding them… |
| CVE-2026-110736 | LOW | 3.6 | 2026-10-14 | Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message). Offsets… | |
| CVE-2026-110735 | LOW | 2.5 | 2026-10-14 | Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string). A st… | |
| CVE-2026-110734 | LOW | 2.5 | 2026-10-14 | Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp). The run-length decoding loop expands … | |
| CVE-2026-110656 | LOW | 3.1 | 2026-10-14 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffer c… | |
| CVE-2026-110655 | LOW | 3.1 | 2026-10-14 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer b… | |
| CVE-2026-60008 | LOW | 3.5 | 2026-10-14 | Gitea's Jupyter notebook renderer inserts the notebook's language_info.name metadata into a CSS class attribute while disabling sanitization and rendering directly in the m… | |
| CVE-2026-110627 | LOW | 4.7 | 2026-10-14 | ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/index.php that allows attackers to inject HTML via the val parameter … | |
| CVE-2026-110624 | LOW | 3.1 | 2026-10-14 | Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to list other groups' tags and document types by supplying a gr… |