Search
17,826 CVEs · Low severity
CVEs (17,826, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 476–500 of 17,826 (capped at 500)
| CVE ID | Severity ↓ | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109274 | LOW | Patched | 2.5 | 2026-10-12 | ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick… |
| CVE-2026-109258 | LOW | Patched | 2.5 | 2026-10-12 | ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attacke… |
| CVE-2026-109247 | LOW | Patched | 3.1 | 2026-10-12 | FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenates ser… |
| CVE-2026-109240 | LOW | Patched | 3.1 | 2026-10-12 | FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RDP servers to crash clients by sending unvalidated Ou… |
| CVE-2026-109241 | LOW | Patched | 3.1 | 2026-10-12 | FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending ou… |
| CVE-2026-108908 | LOW | 2.4 | 2026-10-12 | A vulnerability was identified in Netcore NR268 1.7.121109. Affected by this vulnerability is the function eval of the file /router/l7_call_board_user_set.cgi of the compon… | |
| CVE-2026-108909 | LOW | 4.3 | 2026-10-12 | A security flaw has been discovered in Netcore NR268 1.7.121109. Affected by this issue is some unknown functionality of the component CGI Endpoint. Performing a manipulati… | |
| CVE-2026-105274 | LOW | Patched | — | 2026-10-12 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted repository mirror, or a server answering hex_core's API… |
| CVE-2026-96618 | LOW | Patched | — | 2026-10-12 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package mirror to exhaust the memory or disk space of the ma… |
| CVE-2026-109396 | LOW | Patched | 4.2 | 2026-10-12 | Thelia before 3.1.2 and 3.2.x before 3.2.1 contains a CSV formula injection vulnerability that allows unauthenticated visitors to inject spreadsheet formulas by supplying c… |
| CVE-2026-81856 | LOW | Patched | — | 2026-10-12 | Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publisher or a hostile repository server to inject termi… |
| CVE-2026-109195 | LOW | 3.1 | 2026-10-12 | A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other namespaces, leading to unauthorized information disclosure. T… | |
| CVE-2026-108901 | LOW | 3.5 | 2026-10-12 | A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N. Affected by this vulnerability is an unknown functionality of the component Display QR Code Render… | |
| CVE-2026-108898 | LOW | 3.5 | 2026-10-12 | A vulnerability was detected in Netis WF2409E 3.3.42541. This affects an unknown function of the component Wireless Settings. The manipulation of the argument SSID results … | |
| CVE-2026-103526 | LOW | 3.7 | 2026-10-12 | In Thelia v2.6.0, both the administrative login and forgotten password endpoints return different responses for invalid usernames and incorrect passwords, allowing unauthen… | |
| CVE-2026-108890 | LOW | 6.3 | 2026-10-12 | A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the function terminalManager.spawn of the file packages/serv… | |
| CVE-2026-108834 | LOW | 4.3 | 2026-10-12 | A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file ww_page.php of the component Query Parameter Handler… | |
| CVE-2026-108889 | LOW | 4.4 | 2026-10-12 | A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub_14000443C in the library LWBilling64.sys of the componen… | |
| CVE-2026-108831 | LOW | 6.3 | 2026-10-12 | A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component A… | |
| CVE-2026-105081 | LOW | Patched | 3.6 | 2026-10-12 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured… |
| CVE-2026-108827 | LOW | 4.1 | 2026-10-12 | A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zen_call_function of the file admin/includes/functions/general.php of the component Adminis… | |
| CVE-2026-108828 | LOW | 4.1 | 2026-10-12 | A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The … | |
| CVE-2026-108829 | LOW | 4.7 | 2026-10-12 | A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of the component Module Conf… | |
| CVE-2026-108830 | LOW | 4.2 | 2026-10-12 | A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugins/janus_videoroom.c of the component VideoRoom. Thi… | |
| CVE-2026-108824 | LOW | 6.3 | 2026-10-12 | A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation … |