Search
17,826 CVEs · Low severity
CVEs (17,826, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 76–100 of 17,826 (capped at 500)
| CVE ID | Severity ↓ | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114576 | LOW | 3.7 | 2026-10-22 | A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument se… | |
| CVE-2026-14288 | LOW | Patched | 3.1 | 2026-10-22 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could h… |
| CVE-2026-114574 | LOW | 4.3 | 2026-10-22 | A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Servic… | |
| CVE-2026-103515 | LOW | Patched | 2.7 | 2026-10-22 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instance administrator … |
| CVE-2026-105711 | LOW | Patched | 3.5 | 2026-10-22 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a pu… |
| CVE-2026-112326 | LOW | Patched | 3.1 | 2026-10-22 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could… |
| CVE-2026-114384 | LOW | 6.3 | 2026-10-21 | A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulat… | |
| CVE-2026-114381 | LOW | 6.3 | 2026-10-21 | A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipu… | |
| CVE-2026-114380 | LOW | 6.3 | 2026-10-21 | A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the ar… | |
| CVE-2026-114377 | LOW | 3.8 | 2026-10-21 | A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the function DeleteComment of the file internal/comments/commen… | |
| CVE-2026-114378 | LOW | 6.3 | 2026-10-21 | A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument … | |
| CVE-2026-114375 | LOW | 6.3 | 2026-10-21 | A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler of the file internal/handlers/files.go of the compone… | |
| CVE-2026-114376 | LOW | 6.3 | 2026-10-21 | A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerability is the function SaveHandler/SourceHandler of the file internal/handler… | |
| CVE-2026-114374 | LOW | 4.3 | 2026-10-21 | A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file internal/handlers/metadata_api.go of the component fetch… | |
| CVE-2026-18748 | LOW | 3.5 | 2026-10-21 | The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field plus a fixed 8-byte codec_ie[] array. When an AVDTP… | |
| CVE-2026-114266 | LOW | 6.3 | 2026-10-21 | A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqli_query of the file profile.php. The mani… | |
| CVE-2026-105938 | LOW | Patched | — | 2026-10-21 | Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix subscription authentication mode, which requires a subscription name to sta… |
| CVE-2026-105931 | LOW | Patched | — | 2026-10-21 | The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3/transactions. When authentication and authorization are enabled, most of the read end… |
| CVE-2026-105932 | LOW | Patched | — | 2026-10-21 | The Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic-level entry filter policy of a topic. For persistent topics these endpoints che… |
| CVE-2026-105933 | LOW | Patched | — | 2026-10-21 | Apache Pulsar allows an administrator to require end-to-end message encryption for all topics in a namespace by setting the encryption_required namespace policy. When this … |
| CVE-2026-114264 | LOW | 4.7 | 2026-10-21 | A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file edit_member.php. Perfor… | |
| CVE-2026-114265 | LOW | 6.3 | 2026-10-21 | A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. This affects the function mysqli_query of the file returned_book_search.php of the c… | |
| CVE-2026-114127 | LOW | Patched | — | 2026-10-21 | Astro is a web framework for content-driven websites. From 7.1.0 until 7.3.3, Astro's server-side View Transition CSS generator does not keep string animation properties wi… |
| CVE-2026-114130 | LOW | Patched | — | 2026-10-21 | Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.0, an incomplete fix for CVE-2026-53722 allows an application with pages disabled to render a scri… |
| CVE-2026-114124 | LOW | Patched | 3.9 | 2026-10-21 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame… |