Search
344 CVEs · Low severity
CVEs (344)
Showing 101–125 of 344
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-105927 | LOW | Patched | — | 2026-10-21 | The Apache Pulsar WebSocket service allows a WebSocket consumer to configure a dead letter policy through query parameters of the consumer endpoint, including the deadLette… |
| CVE-2026-114122 | LOW | Patched | 3.9 | 2026-10-21 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame… |
| CVE-2026-113797 | LOW | Patched | 3.1 | 2026-10-21 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrom… |
| CVE-2026-114472 | LOW | 3.7 | 2026-10-21 | Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to cause a … | |
| CVE-2026-114370 | LOW | 3.7 | 2026-10-21 | A flaw was found in the PathResourceManager component of the Undertow web server. This component is responsible for serving static files from the file system. The issue occ… | |
| CVE-2026-114253 | LOW | 6.3 | 2026-10-21 | A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. The impacted element is the function include of the f… | |
| CVE-2026-114252 | LOW | 6.3 | 2026-10-21 | A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file… | |
| CVE-2026-114251 | LOW | 6.3 | 2026-10-21 | A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages… | |
| CVE-2026-113786 | LOW | Patched | — | 2026-10-21 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter that causes P… |
| CVE-2026-114250 | LOW | 6.3 | 2026-10-21 | A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pag… | |
| CVE-2026-104949 | LOW | — | 2026-10-21 | WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in gp_add_coordinator_standby(). The functi… | |
| CVE-2026-87096 | LOW | 3.3 | 2026-10-21 | Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build… | |
| CVE-2026-35501 | LOW | 3.7 | 2026-10-21 | When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zon… | |
| CVE-2026-114236 | LOW | 3.3 | 2026-10-21 | storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the… | |
| CVE-2026-104642 | LOW | Patched | 2.7 | 2026-10-21 | The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices against a value only the site owner can set, allowing users with the Contrib… |
| CVE-2026-96901 | LOW | Patched | 3.7 | 2026-10-21 | The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.2.0 does not verify the integrity of its cart-recovery token before acting on it and still accepts … |
| CVE-2026-105257 | LOW | Patched | 2.7 | 2026-10-21 | The Appointment Booking Plugin WordPress plugin before 5.7.5 does not verify that an authenticated agent-level user is assigned to a customer before returning or searching… |
| CVE-2026-114040 | LOW | 3.5 | 2026-10-21 | A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelManager.get_model_meta of the file berrynet/dlmodelmgr… | |
| CVE-2026-114039 | LOW | 6.3 | 2026-10-21 | A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqli_query of the file report_search.php. Executing a man… | |
| CVE-2026-113743 | LOW | 6.3 | 2026-10-21 | A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/… | |
| CVE-2026-114071 | LOW | Patched | 3.1 | 2026-10-21 | Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to complete another member's DEVELOPMENT environment wait… |
| CVE-2026-114061 | LOW | Patched | 4.7 | 2026-10-21 | SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a cache-control header value set via setHeaders is inserte… |
| CVE-2026-114060 | LOW | Patched | 4.7 | 2026-10-21 | SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form actions (use:enhance) on routes accepting paths beginning with a double slas… |
| CVE-2026-113741 | LOW | 4.3 | 2026-10-21 | A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation… | |
| CVE-2026-113740 | LOW | 6.3 | 2026-10-21 | A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /deletecustomer.php. This mani… |