Search
17,826 CVEs · Low severity
CVEs (17,826, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 451–475 of 17,826 (capped at 500)
| CVE ID | Severity ↑ | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108935 | LOW | 2.4 | 2026-10-12 | A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw of the component Port Forwardin… | |
| CVE-2026-108936 | LOW | 2.4 | 2026-10-12 | A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formQoS of the component QoS Page. The manipulation le… | |
| CVE-2026-108932 | LOW | 4.3 | 2026-10-12 | A vulnerability was determined in Netcore NR268 1.7.121109. This impacts the function eval of the file filter_hosts_dump.cgi of the component DHCP Hostname Handler. This ma… | |
| CVE-2026-108933 | LOW | 2.4 | 2026-10-12 | A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation leads to cross site scripting. Th… | |
| CVE-2026-108934 | LOW | 2.4 | 2026-10-12 | A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP … | |
| CVE-2026-109571 | LOW | 4.3 | 2026-10-12 | Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measure… | |
| CVE-2026-109561 | LOW | Patched | 4.2 | 2026-10-12 | goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode because persisted read… |
| CVE-2026-109564 | LOW | Patched | 3.1 | 2026-10-12 | LearnHouse before 1.4.0 contains a missing authorization vulnerability in POST /api/v1/playgrounds/{uuid}/duplicate that skips the read-access and draft checks enforced by … |
| CVE-2026-108927 | LOW | 6.3 | 2026-10-12 | A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the file pbaptism.php. This manipulatio… | |
| CVE-2026-108928 | LOW | 6.3 | 2026-10-12 | A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php. Such manipula… | |
| CVE-2026-108930 | LOW | 2.7 | 2026-10-12 | A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddns_wan_list_show of the file ddns_wan_list_show.cgi of the component DDNS… | |
| CVE-2026-108931 | LOW | 4.3 | 2026-10-12 | A vulnerability was found in Netcore NR268 1.7.121109. This affects the function eval of the file dhcp_dynamicip_show.cgi of the component DHCP Handler. The manipulation of… | |
| CVE-2026-108923 | LOW | 6.3 | 2026-10-12 | A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of th… | |
| CVE-2026-108926 | LOW | 6.3 | 2026-10-12 | A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manipulation of th… | |
| CVE-2026-104364 | LOW | 3.3 | 2026-10-12 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation. | |
| CVE-2026-108919 | LOW | 4.3 | 2026-10-12 | A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/add_student.php of the compone… | |
| CVE-2026-108920 | LOW | 4.3 | 2026-10-12 | A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/user_record.php of the compo… | |
| CVE-2026-108922 | LOW | 6.3 | 2026-10-12 | A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function getimagesize of the file upload_sa… | |
| CVE-2026-42689 | LOW | 3.7 | 2026-10-12 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Pixelite Events Manager events-manager allows Leveraging Race C… | |
| CVE-2026-109332 | LOW | Patched | 3.1 | 2026-10-12 | Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins int… |
| CVE-2026-109307 | LOW | Patched | 4.7 | 2026-10-12 | Craft CMS 5.0.0 before 5.10.14 contains a DOM-based cross-site scripting vulnerability in the control panel login and 2FA verification flow, where a user-controlled returnU… |
| CVE-2026-109282 | LOW | Patched | 2.5 | 2026-10-12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an u… |
| CVE-2026-109285 | LOW | Patched | 5.0 | 2026-10-12 | Open WebUI from 0.6.0 before 0.11.4 contains an improper access control vulnerability in has_access_to_file that lets former knowledge base collaborators keep file access v… |
| CVE-2026-109279 | LOW | Patched | 2.5 | 2026-10-12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by mu… |
| CVE-2026-109280 | LOW | Patched | 2.5 | 2026-10-12 | ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attac… |