Search
35,912 CVEs · Medium severity
CVEs (35,912, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 51–75 of 35,912 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-111965 | MEDIUM | 4.3 | 2026-10-23 | The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass… | |
| CVE-2026-105963 | MEDIUM | Patched | — | 2026-10-23 | Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in elixir-plug plug_crypto allows an unauthenticated remote attacker to exp… |
| CVE-2026-89319 | MEDIUM | — | 2026-10-23 | `JweDirectDecryptorBlock.Decrypt` read a 64-bit plaintext length from the `_thales_aad` protected-header field and used it without any validation. A truncated field panics … | |
| CVE-2026-89318 | MEDIUM | — | 2026-10-23 | `JweRsaKeyEncryptionDecryptorImpl.Decrypt` passed the JWE's initialization vector to `cipher.AEAD.Open` without checking its length. The Go standard library **panics** rath… | |
| CVE-2026-89317 | MEDIUM | — | 2026-10-23 | gose parsed the JWS `crit` header into `JwsHeader.Crit` and then never read it. RFC 7515 §4.1.11 requires a recipient to reject a JWS whose listed critical extension parame… | |
| CVE-2026-89316 | MEDIUM | — | 2026-10-23 | `LoadPublicKey` resolved an EC key's curve with an unchecked type assertion, `algToOptsMap[alg].(*ECDSAOptions)`. A JWK declaring `"kty":"EC"` together with a non-EC `"alg"… | |
| CVE-2026-89315 | MEDIUM | — | 2026-10-23 | `JwtClaims.MarshalJSON` built a Go struct at runtime with `reflect.StructOf`, synthesising a field named `"A" + claimName` for each untyped claim. `reflect.StructOf` **pani… | |
| CVE-2026-89314 | MEDIUM | — | 2026-10-23 | `jwkFields.CheckConsistency` detected duplicate `key_ops` entries with a pairwise nested loop, making validation cost grow with the **square** of the entry count. Because t… | |
| CVE-2026-89313 | MEDIUM | — | 2026-10-23 | `JwksTrustStore.Get` assigned each parsed key to the function's **named return value** while refreshing the JWKS cache. When the requested `kid` was not present, the traili… | |
| CVE-2026-89312 | MEDIUM | — | 2026-10-23 | `AesGcmCryptor.Open` passed a caller-supplied nonce straight to `cipher.AEAD.Open` without checking its length. The Go standard library **panics** rather than returning an … | |
| CVE-2026-115657 | MEDIUM | Patched | — | 2026-10-23 | When used as an executor in either KNIME Server or KNIME Business Hub, KNIME Analytics Platform LTS versions before 5.8.4 log configured credentials of proxies during start… |
| CVE-2026-112825 | MEDIUM | 6.5 | 2026-10-23 | Missing Authorization vulnerability in Magepeople inc. Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This is… | |
| CVE-2026-112821 | MEDIUM | 6.5 | 2026-10-23 | Missing Authorization vulnerability in Knit Pay Knit Pay knit-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knit Pay: from … | |
| CVE-2025-58403 | MEDIUM | — | 2026-10-23 | CGM CLININET is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of user-supplied data. A remote unauthenticated attacker can craft a malic… | |
| CVE-2025-30053 | MEDIUM | — | 2026-10-23 | The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication. The vulnerability was confirmed to affect versio… | |
| CVE-2025-30051 | MEDIUM | Patched | — | 2026-10-23 | The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file pe… |
| CVE-2026-4952 | MEDIUM | — | 2026-10-23 | The "ASMobile" web interface, which is part of the VertiGIS software package "GIS Portal", allows authenticated users to define a business reference. JavaScript code can be… | |
| CVE-2026-4951 | MEDIUM | — | 2026-10-23 | The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for employees across all defined companies (user groups). The… | |
| CVE-2026-4950 | MEDIUM | — | 2026-10-23 | The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies (user groups). User proper… | |
| CVE-2026-63243 | MEDIUM | 4.3 | 2026-10-23 | An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could allow an attacker within Bluetooth range to connect … | |
| CVE-2026-94264 | MEDIUM | Patched | 6.8 | 2026-10-23 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not validate or escape some … |
| CVE-2026-113472 | MEDIUM | Patched | 5.4 | 2026-10-23 | The Depicter — Popup & Slider Builder WordPress plugin before 4.8.2 does not properly validate uploaded files in its editor media-upload endpoint, checking only the client-… |
| CVE-2026-112219 | MEDIUM | Patched | 4.9 | 2026-10-23 | The Download Monitor WordPress plugin before 5.3.5 does not correctly restrict management of the list of filesystem locations it may serve files from to network administrat… |
| CVE-2026-111966 | MEDIUM | Patched | 6.8 | 2026-10-23 | The User Profile Builder WordPress plugin before 4.0.5 does not sanitise and escape one of its shortcode attributes before outputting it back in a redirect message, which … |
| CVE-2026-111738 | MEDIUM | Patched | 5.5 | 2026-10-23 | The Speed Optimizer WordPress plugin before 7.8.5 does not verify network-level privilege before applying an option change to the whole multisite network, nor restrict whi… |