Search
172,839 CVEs · Medium severity
CVEs (172,839, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 176–200 of 172,839 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2020-37284 | MEDIUM | 6.1 | 2026-10-22 | Sickbeard through build-507 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the pattern parameter of… | |
| CVE-2017-20290 | MEDIUM | Patched | 6.1 | 2026-10-22 | Discourse 1.9.0.beta2 before 1.9.0.beta13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the email … |
| CVE-2017-20288 | MEDIUM | 6.1 | 2026-10-22 | QCubed 2.2.0 through 3.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the installation_path par… | |
| CVE-2026-114348 | MEDIUM | Patched | 5.3 | 2026-10-22 | webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 before 5.2.7 and in version 6.0.0, the unauthenticated … |
| CVE-2026-106017 | MEDIUM | — | 2026-10-22 | Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions. | |
| CVE-2026-96293 | MEDIUM | — | 2026-10-22 | A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or pro… | |
| CVE-2026-114703 | MEDIUM | 6.5 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored… | |
| CVE-2026-114702 | MEDIUM | 6.5 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicdark ND Shortcodes For Visual Composer nd-shortcodes allows Stored … | |
| CVE-2026-114701 | MEDIUM | 6.5 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xootix Waitlist Woocommerce ( Back in stock notifier ) waitlist-woocom… | |
| CVE-2026-114700 | MEDIUM | 6.5 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gloriafood Restaurant Menu – Food Ordering System – Table Reservation … | |
| CVE-2026-114699 | MEDIUM | 5.3 | 2026-10-22 | Missing Authorization vulnerability in yoomoney ЮKassa для WooCommerce yookassa allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ю… | |
| CVE-2026-114698 | MEDIUM | 5.4 | 2026-10-22 | Authorization Bypass Through User-Controlled Key vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… | |
| CVE-2026-114696 | MEDIUM | 5.3 | 2026-10-22 | Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-114195 | MEDIUM | 5.3 | 2026-10-22 | Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Desk ShopMagic shopmagic-for-woocommerce allows Retrieve Embedded Sensit… | |
| CVE-2026-112845 | MEDIUM | 6.5 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars) off-canvas-sideb… | |
| CVE-2026-112311 | MEDIUM | 6.5 | 2026-10-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ACF Extended ACF Extended acf-extended allows Path Traversal.This issue affe… | |
| CVE-2026-112218 | MEDIUM | 5.3 | 2026-10-22 | Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ma… | |
| CVE-2026-111842 | MEDIUM | 5.3 | 2026-10-22 | Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… | |
| CVE-2026-110974 | MEDIUM | — | 2026-10-22 | The org.json parser in com.vaadin.external.google:android-json recurses once per nesting level with no depth limit: JSONTokener.nextValue() calls readArray() and readObject… | |
| CVE-2026-110894 | MEDIUM | 5.3 | 2026-10-22 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDas… | |
| CVE-2026-110893 | MEDIUM | 5.3 | 2026-10-22 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDas… | |
| CVE-2026-114460 | MEDIUM | 5.3 | 2026-10-22 | A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query strin… | |
| CVE-2026-114458 | MEDIUM | 5.9 | 2026-10-22 | A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) by maintaining numerous concurrent low-rate connections to a target serv… | |
| CVE-2026-114184 | MEDIUM | 6.5 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-bui… | |
| CVE-2026-114182 | MEDIUM | 4.3 | 2026-10-22 | Missing Authorization vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Exploiting Incorrectly Configured Access Control… |