Search
17,816 CVEs · Low severity
EOL hidden · Show all products
CVEs (17,816, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 426–450 of 17,816 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-107832 | LOW | Patched | 3.7 | 2026-10-13 | fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that lowercases header names declared in a route schema does no… |
| CVE-2026-109407 | LOW | 3.1 | 2026-10-13 | A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coup… | |
| CVE-2026-109402 | LOW | 6.3 | 2026-10-13 | A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/conductoross/conductor/ai/mcp/MC… | |
| CVE-2026-109190 | LOW | 6.3 | 2026-10-13 | A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of the file ListApiToolsTask.java of the component API To… | |
| CVE-2026-109189 | LOW | 6.3 | 2026-10-13 | A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3ParserApiDefinition.testUrlTimeout of the file backend/p… | |
| CVE-2026-109160 | LOW | 4.3 | 2026-10-13 | A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file publiccms-core/src/main/java… | |
| CVE-2026-109854 | LOW | 2.5 | 2026-10-13 | A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory f… | |
| CVE-2026-109143 | LOW | 5.4 | 2026-10-13 | A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file /api/trpc/credentials/delet… | |
| CVE-2026-109106 | LOW | 4.4 | 2026-10-13 | A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulnerability is the function com.infraware.service.m.n.a of the component Doc… | |
| CVE-2026-108960 | LOW | 5.3 | 2026-10-13 | A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function create_striped_mat_to_gpu of the file smallthin… | |
| CVE-2026-108959 | LOW | 6.3 | 2026-10-13 | A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipula… | |
| CVE-2026-108958 | LOW | 6.3 | 2026-10-13 | A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. E… | |
| CVE-2026-108957 | LOW | 6.3 | 2026-10-13 | A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function _load_text_config of… | |
| CVE-2026-9268 | LOW | Patched | 2.7 | 2026-10-13 | GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could… |
| CVE-2026-82632 | LOW | Patched | 3.1 | 2026-10-13 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, co… |
| CVE-2026-108955 | LOW | 5.3 | 2026-10-13 | A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function gguf_init_from_file of the file ggml.c of the… | |
| CVE-2026-108954 | LOW | 6.3 | 2026-10-13 | A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offl… | |
| CVE-2026-108948 | LOW | 5.4 | 2026-10-13 | A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/… | |
| CVE-2026-108947 | LOW | 5.3 | 2026-10-13 | A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file torchdistill/common/main_util.py. Executing a manipul… | |
| CVE-2026-103549 | LOW | Patched | 2.7 | 2026-10-13 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, co… |
| CVE-2026-100104 | LOW | Patched | 3.5 | 2026-10-13 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, co… |
| CVE-2026-58242 | LOW | 3.5 | 2026-10-13 | SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation require… | |
| CVE-2026-108944 | LOW | 4.8 | 2026-10-13 | A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function get_obj_from_str… | |
| CVE-2026-108943 | LOW | 5.3 | 2026-10-13 | A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained of the file lightx2v/models/runners/cosmos3/cosmos3_r… | |
| CVE-2026-108941 | LOW | 4.8 | 2026-10-13 | A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parse_cfg_args of the file internal/utils/common.py of the component Sidecar Pa… |