Search
4,651 CVEs
CVEs (4,651, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 101–125 of 4,651 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↑ | Description |
|---|---|---|---|---|---|
| CVE-2026-105391 | NONE | — | 2026-10-17 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-107274 | NONE | — | 2026-10-17 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-107345 | NONE | — | 2026-10-17 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-107772 | NONE | — | 2026-10-17 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-108117 | NONE | — | 2026-10-17 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-111866 | MEDIUM | 7.3 | 2026-10-18 | A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/del_cache/arr2sql of the file func.php. … | |
| CVE-2026-111868 | LOW | 6.3 | 2026-10-18 | A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pulsar-jms/src/main/java/com/datastax/oss/pulsar/jms/m… | |
| CVE-2026-111997 | MEDIUM | Patched | — | 2026-10-18 | ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching a function ca… |
| CVE-2026-111869 | MEDIUM | 5.3 | 2026-10-18 | A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-… | |
| CVE-2026-111870 | MEDIUM | 5.3 | 2026-10-18 | A security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is the function isAdmin… | |
| CVE-2026-111871 | MEDIUM | 7.3 | 2026-10-18 | A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is an unknown function of th… | |
| CVE-2026-111872 | MEDIUM | 7.3 | 2026-10-18 | A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::va… | |
| CVE-2026-111873 | MEDIUM | 7.3 | 2026-10-18 | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This impacts the function MySQLDB::topicslist of th… | |
| CVE-2026-111874 | LOW | 3.7 | 2026-10-18 | A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. This manipulation … | |
| CVE-2026-111875 | LOW | 4.7 | 2026-10-18 | A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveS… | |
| CVE-2026-111876 | LOW | 5.3 | 2026-10-18 | A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performi… | |
| CVE-2026-109937 | MEDIUM | Patched | 5.4 | 2026-10-18 | The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to the site before using it to build the return destination of a S… |
| CVE-2026-110026 | MEDIUM | Patched | 4.9 | 2026-10-18 | The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and deleting taxonomy terms, allowing users with a… |
| CVE-2026-110031 | HIGH | Patched | 7.2 | 2026-10-18 | The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to other account… |
| CVE-2026-110032 | MEDIUM | Patched | 5.5 | 2026-10-18 | The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles may edit through the customers management screen, allo… |
| CVE-2026-110033 | MEDIUM | Patched | 6.8 | 2026-10-18 | The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching it server-side and writing the response to a publicly… |
| CVE-2026-110035 | MEDIUM | Patched | 4.3 | 2026-10-18 | The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API endpoints to salon staff, allowing any authenticated user, such as a subscr… |
| CVE-2026-110069 | MEDIUM | Patched | 4.3 | 2026-10-18 | The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, all… |
| CVE-2026-110070 | MEDIUM | Patched | 6.5 | 2026-10-18 | The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post before updating it, allowing authenticated … |
| CVE-2026-110976 | MEDIUM | Patched | 4.9 | 2026-10-18 | The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the requesting user before converting it to an attac… |