Search
17,826 CVEs · Low severity
CVEs (17,826, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 76–100 of 17,826 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-94426 | LOW | 3.5 | 2026-09-21 | A vulnerability was determined in xuxueli xxl-job up to 3.5.0. The impacted element is an unknown function of the file /jobgroup/insert. This manipulation of the argument N… | |
| CVE-2026-94418 | LOW | Patched | 7.5 | 2026-09-27 | Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the certificate signature check separately from the parse to keep peak memory down, then merges the two results… |
| CVE-2026-94297 | LOW | Patched | 2.7 | 2026-09-30 | The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new … |
| CVE-2026-94258 | LOW | Patched | 2.7 | 2026-10-08 | The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phon… |
| CVE-2026-94218 | LOW | 3.1 | 2026-09-21 | A flaw was found in the authentication session management of Keycloak, an identity and access management solution. The issue occurs when an administrator enforces a stronge… | |
| CVE-2026-94217 | LOW | 3.5 | 2026-09-21 | A flaw was found in the User-Managed Access (UMA) implementation of Keycloak. The issue occurs in the authorization token endpoint when processing permission tickets. If tw… | |
| CVE-2026-94216 | LOW | 4.3 | 2026-09-21 | A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handl… | |
| CVE-2026-94214 | LOW | 4.3 | 2026-09-21 | A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the… | |
| CVE-2026-94211 | LOW | 2.4 | 2026-09-21 | A vulnerability has been found in Hyve5 Leantime up to 3.9.8. Affected by this issue is some unknown functionality of the file /app/Domain/Dashboard/Templates/show.blade.ph… | |
| CVE-2026-94210 | LOW | 3.5 | 2026-09-21 | A flaw has been found in Hyve5 Leantime up to 3.9.8. Affected by this vulnerability is the function getAllGrouped of the file app/Domain/Tickets/Services/Tickets.php of the… | |
| CVE-2026-94150 | LOW | 2.4 | 2026-09-21 | A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/view/ of the component SVG File … | |
| CVE-2026-94145 | LOW | 3.5 | 2026-09-21 | A vulnerability has been found in xuxueli xxl-job up to 3.4.2/3.5.0. This vulnerability affects unknown code of the file xxl-job-admin/src/main/java/com/xxl/job/admin/busin… | |
| CVE-2026-9414 | LOW | 3.5 | 2026-05-25 | A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/add_order.ph… | |
| CVE-2026-94137 | LOW | 3.3 | 2026-09-21 | A vulnerability was identified in Hangzhou Shunwang Technology shzh 10.7.2.693. This affects the function sub_180004AC0 of the file shdrv_x64.sys of the component IRP_MJ_DE… | |
| CVE-2026-94055 | LOW | Patched | 3.7 | 2026-09-19 | Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free. |
| CVE-2026-94045 | LOW | 3.5 | 2026-09-20 | A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown function of the file controller/common/UploadController.java of the compon… | |
| CVE-2026-94034 | LOW | 3.5 | 2026-09-20 | A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drug_recommender/Admin/change_password o… | |
| CVE-2026-94033 | LOW | 3.5 | 2026-09-20 | A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drug_recommender/Admin/add_user of the… | |
| CVE-2026-94030 | LOW | 3.1 | 2026-09-20 | A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decode_bmp_pixel_dat… | |
| CVE-2026-94016 | LOW | 2.4 | 2026-09-20 | A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drug_recommender/Admin/add_symptom. Perf… | |
| CVE-2026-93989 | LOW | Patched | 3.1 | 2026-09-19 | vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in SamplingParams.update_from_tokenizer(). Attackers can … |
| CVE-2026-93987 | LOW | Patched | 3.4 | 2026-09-19 | rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve docker` volume plugin. newVolume() in cmd/serve/docker/volume.go computes … |
| CVE-2026-93986 | LOW | Patched | 3.1 | 2026-09-19 | rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names. Attack… |
| CVE-2026-9398 | LOW | 3.1 | 2026-05-24 | A security vulnerability has been detected in Besen BS20 EV Charging Station up to 20260426. This affects an unknown part of the component BLE/WiFi. Such manipulation leads… | |
| CVE-2026-93977 | LOW | 3.5 | 2026-09-20 | A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown functionality of the file lecturer/add-single-mark.p… |