Search
17,826 CVEs · Low severity
CVEs (17,826, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 51–75 of 17,826 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-9215 | LOW | Patched | 6.7 | 2026-09-08 | A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator t… |
| CVE-2026-112372 | LOW | 6.6 | 2026-10-19 | A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName cause… | |
| CVE-2026-77988 | LOW | 6.6 | 2026-08-22 | A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. This manipulatio… | |
| CVE-2026-67420 | LOW | Patched | 6.5 | 2026-09-25 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ OAuth credential refresh retains revoked runtime tags. … |
| CVE-2026-67218 | LOW | Patched | 6.5 | 2026-09-23 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, accept_content/2 at line 56 calls rabbit_stream_manager:create_super_strea… |
| CVE-2026-66076 | LOW | Patched | 6.5 | 2026-09-23 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, is_authorized/2 calls rabbit_mgmt_util:is_authorized/2, which che… |
| CVE-2026-0289 | LOW | Patched | 6.5 | 2026-08-13 | A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls. |
| CVE-2025-12141 | LOW | Patched | 6.5 | 2026-04-15 | In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions “alert.notifications:write” or “alert.notifications.receivers:te… |
| CVE-2025-62852 | LOW | 6.5 | 2026-01-02 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then explo… | |
| CVE-2025-48721 | LOW | 6.5 | 2026-01-02 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then explo… | |
| CVE-2025-52871 | LOW | Patched | 6.5 | 2026-01-02 | An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain… |
| CVE-2025-53597 | LOW | Patched | 6.5 | 2026-01-02 | A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to … |
| CVE-2025-53593 | LOW | 6.5 | 2026-01-02 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then explo… | |
| CVE-2025-53591 | LOW | 6.5 | 2026-01-02 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator a… | |
| CVE-2025-53592 | LOW | 6.5 | 2026-01-02 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploi… | |
| CVE-2025-44013 | LOW | 6.5 | 2026-01-02 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploi… | |
| CVE-2025-14714 | LOW | Patched | 6.5 | 2025-12-15 | An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions … |
| CVE-2025-62497 | LOW | Patched | 6.5 | 2025-11-25 | Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a specially crafted webpage while logged in, unintended operat… |
| CVE-2025-11933 | LOW | Patched | 6.5 | 2025-11-21 | Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially ca… |
| CVE-2025-53408 | LOW | Patched | 6.5 | 2025-11-07 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to l… |
| CVE-2025-53412 | LOW | Patched | 6.5 | 2025-11-07 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to l… |
| CVE-2025-52865 | LOW | Patched | 6.5 | 2025-11-07 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to l… |
| CVE-2025-62247 | LOW | Patched | 6.5 | 2025-10-22 | Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1… |
| CVE-2025-59829 | LOW | Patched | 6.5 | 2025-10-03 | Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code ac… |
| CVE-2025-27236 | LOW | Patched | 6.5 | 2025-10-03 | A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field v… |