Search
172,839 CVEs · Medium severity
CVEs (172,839, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 451–475 of 172,839 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-96370 | MEDIUM | 5.4 | 2026-10-22 | Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| CVE-2026-96368 | MEDIUM | 4.6 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions:… | |
| CVE-2026-96367 | MEDIUM | 4.6 | 2026-10-22 | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| CVE-2026-96366 | MEDIUM | 5.3 | 2026-10-22 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| CVE-2026-96364 | MEDIUM | 5.3 | 2026-10-22 | Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0… | |
| CVE-2026-96362 | MEDIUM | 4.2 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects W… | |
| CVE-2026-96361 | MEDIUM | 4.6 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects W… | |
| CVE-2026-96359 | MEDIUM | 4.6 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects W… | |
| CVE-2026-96358 | MEDIUM | 4.6 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects W… | |
| CVE-2026-96357 | MEDIUM | 4.6 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions:… | |
| CVE-2026-96356 | MEDIUM | 5.3 | 2026-10-22 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| CVE-2026-9635 | MEDIUM | 6.4 | 2026-07-23 | The WP Shortcode by MyThemeShop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the [tab] shortcode in versions up to, and in… | |
| CVE-2026-96347 | MEDIUM | 6.5 | 2026-09-30 | Subscriber Insecure Direct Object References (IDOR) in Bookly <= 28.2 versions. | |
| CVE-2026-96338 | MEDIUM | 6.5 | 2026-09-30 | Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions. | |
| CVE-2026-96337 | MEDIUM | 6.5 | 2026-10-09 | Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… | |
| CVE-2026-96334 | MEDIUM | 5.6 | 2026-10-09 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… | |
| CVE-2026-96321 | MEDIUM | Patched | 5.5 | 2026-10-13 | Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-96316 | MEDIUM | Patched | 5.5 | 2026-10-13 | Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally. |
| CVE-2026-96315 | MEDIUM | Patched | 5.5 | 2026-10-13 | Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally. |
| CVE-2026-96314 | MEDIUM | Patched | 5.5 | 2026-10-13 | Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. |
| CVE-2026-96311 | MEDIUM | Patched | 5.5 | 2026-10-13 | Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally. |
| CVE-2026-96303 | MEDIUM | Patched | 6.5 | 2026-10-13 | Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-96300 | MEDIUM | Patched | 5.9 | 2026-10-13 | Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96297 | MEDIUM | 6.5 | 2026-10-13 | Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregati… | |
| CVE-2026-96293 | MEDIUM | — | 2026-10-22 | A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or pro… |