Search
2,007 CVEs · Low severity
CVEs (2,007, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 26–50 of 2,007 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-115535 | LOW | 2.4 | 2026-10-23 | A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function sistem.php::simpan of … | |
| CVE-2026-115534 | LOW | 4.3 | 2026-10-23 | A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function kirim of the file application/modu… | |
| CVE-2026-115449 | LOW | 3.5 | 2026-10-22 | A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions w… | |
| CVE-2026-114614 | LOW | Patched | 2.6 | 2026-10-22 | Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.is_secure_transport() uses a textual prefix compar… |
| CVE-2026-115509 | LOW | Patched | 4.2 | 2026-10-22 | Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts handlers that call findFirst without await, so the syncId ownershi… |
| CVE-2026-95721 | LOW | 3.3 | 2026-10-22 | A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with lo… | |
| CVE-2026-115519 | LOW | — | 2026-10-22 | Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other s… | |
| CVE-2026-115393 | LOW | Patched | 3.8 | 2026-10-22 | Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type confusion vulnerability because several Store APIs fail to va… |
| CVE-2026-115389 | LOW | Patched | 2.3 | 2026-10-22 | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account for host allocations when lifting guest values through the dynamically-t… |
| CVE-2026-115386 | LOW | Patched | 2.6 | 2026-10-22 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disclosure vulnerability in the WASIp1 fd_readdir implementation that copies… |
| CVE-2026-115369 | LOW | Patched | 2.2 | 2026-10-22 | OpenBao from 2.5.0 before 2.6.2 fails to enforce the PKI role allowed_ip_sans_cidr restriction on IP SANs taken from a CSR when use_csr_sans is enabled. Authenticated calle… |
| CVE-2026-115366 | LOW | Patched | 2.6 | 2026-10-22 | OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace tokens to modify plugin registrations because /v1/sy… |
| CVE-2026-115364 | LOW | Patched | 2.2 | 2026-10-22 | OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and Proxy services by omitting the X-Vault-Header. When require_request_head… |
| CVE-2026-115363 | LOW | Patched | 3.3 | 2026-10-22 | OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 contains an information disclosure vulnerability that exposes the tls_acme_eab_mac_key value through the sys/config/state/… |
| CVE-2026-115362 | LOW | Patched | 2.2 | 2026-10-22 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in the AppRole auth method, leaving expired Secret IDs valid until the periodic tidy … |
| CVE-2026-115361 | LOW | Patched | 4.1 | 2026-10-22 | OpenBao before 2.6.3 contains an ACL bypass vulnerability that silently drops explicit deny rules based on forbidden identity metadata templates within wildcard grants. Att… |
| CVE-2026-115358 | LOW | Patched | 2.0 | 2026-10-22 | OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into audit logs by sending malformed plugin parameters. A… |
| CVE-2026-115357 | LOW | Patched | 2.2 | 2026-10-22 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints… |
| CVE-2026-113875 | LOW | 3.1 | 2026-10-22 | On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissions, they may be able to query and read resources th… | |
| CVE-2026-54238 | LOW | Patched | 3.1 | 2026-10-22 | Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to version 2.103.1, the REST broadcast endpoints accept an expired JWT when the e… |
| CVE-2026-115249 | LOW | 4.6 | 2026-10-22 | A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Impacted is an unknown function of the file patappoint… | |
| CVE-2026-115248 | LOW | 5.4 | 2026-10-22 | A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This issue affects some unknown processing of t… | |
| CVE-2026-115247 | LOW | 4.3 | 2026-10-22 | A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This vulnerability affects unknow… | |
| CVE-2026-115246 | LOW | 3.5 | 2026-10-22 | A weakness has been identified in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown part of the file patd… | |
| CVE-2026-115319 | LOW | 2.5 | 2026-10-22 | fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexity vulnerability in maskActionContents that allows local attackers to exhaust the --listen HTTP server… |