Search
4,429 CVEs · Low severity
CVEs (4,429, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 51–75 of 4,429 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-21812 | LOW | 2.2 | 2026-10-22 | HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over H… | |
| CVE-2026-21811 | LOW | 3.8 | 2026-10-22 | HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution. Depe… | |
| CVE-2026-114459 | LOW | 3.7 | 2026-10-22 | A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An un… | |
| CVE-2026-114457 | LOW | 3.7 | 2026-10-22 | A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering i… | |
| CVE-2026-88849 | LOW | Patched | 2.7 | 2026-10-22 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.55 does not verify that a user targeted through its student-enrolment feature has any relationship to the … |
| CVE-2026-110011 | LOW | Patched | 2.7 | 2026-10-22 | The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform a capability check in its export feature, allowing users with a role as low as … |
| CVE-2026-109931 | LOW | Patched | 3.7 | 2026-10-22 | The Infility Global WordPress plugin before 2.16.25 does not perform any authorisation or nonce check on an AJAX action available to unauthenticated users, allowing any vis… |
| CVE-2026-96392 | LOW | 3.5 | 2026-10-22 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: fr… | |
| CVE-2026-96387 | LOW | 3.8 | 2026-10-22 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator login allows Authentication Bypass. This issue affects Stop administrato… | |
| CVE-2026-96384 | LOW | 3.5 | 2026-10-22 | Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9. | |
| CVE-2026-96373 | LOW | 3.3 | 2026-10-22 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| CVE-2026-96369 | LOW | 3.1 | 2026-10-22 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issu… | |
| CVE-2026-96360 | LOW | 3.5 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects W… | |
| CVE-2026-87953 | LOW | 3.3 | 2026-10-22 | Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forgery. This issue affects SAML SSO - Service Provider … | |
| CVE-2026-87952 | LOW | 3.1 | 2026-10-22 | Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials. This issue affects SAML SSO - S… | |
| CVE-2026-87951 | LOW | 3.8 | 2026-10-22 | Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Servic… | |
| CVE-2026-87949 | LOW | 3.3 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS).… | |
| CVE-2026-87948 | LOW | 3.5 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS).… | |
| CVE-2026-84918 | LOW | 3.7 | 2026-10-22 | Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from… | |
| CVE-2026-84916 | LOW | 3.7 | 2026-10-22 | Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0. | |
| CVE-2026-84911 | LOW | 3.1 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS. This issue affe… | |
| CVE-2026-16648 | LOW | 3.8 | 2026-10-22 | Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Stolen Credentials. This issue affects Mailer Plus Log … | |
| CVE-2026-114723 | LOW | Patched | 3.7 | 2026-10-22 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcube_image falls back to GD,… |
| CVE-2026-114721 | LOW | Patched | 3.1 | 2026-10-22 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed. The check compared only the action name as requeste… |
| CVE-2026-114719 | LOW | Patched | 3.7 | 2026-10-22 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the markasjunk plugin. The plugin read the _uid… |