Search
17,826 CVEs · Low severity
CVEs (17,826, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 201–225 of 17,826 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-91264 | LOW | 3.7 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Difficult … | |
| CVE-2026-91261 | LOW | 3.1 | 2026-10-20 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Diffi… | |
| CVE-2026-91249 | LOW | 3.3 | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. Easily exploitable vulnerability all… | |
| CVE-2026-91165 | LOW | Patched | 2.4 | 2026-09-21 | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.27.6, the response_mode=form_post SSO return path in warpgate-protocol-http/src/api/sso_p… |
| CVE-2026-91142 | LOW | 3.6 | 2026-09-18 | A flaw was found in Cockpit. An authenticated local user with a large user identifier (UID) can cause unauthorized modification and disclosure of login records. On 32-bit s… | |
| CVE-2026-91090 | LOW | 3.9 | 2026-09-15 | A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gf_node_activate_ex of the file scenegraph/base_scenegraph.c. This manipulation … | |
| CVE-2026-91077 | LOW | Patched | 2.7 | 2026-09-23 | The Event Booking Manager for WooCommerce WordPress plugin before 5.7.3 does not restrict its event listing query to events the requesting user is permitted to read, so us… |
| CVE-2026-91023 | LOW | Patched | 3.1 | 2026-10-02 | The Motors WordPress plugin before 1.4.124 does not properly verify that a user is authorised to modify a listing before processing one of its listing management actions, … |
| CVE-2026-91017 | LOW | Patched | 3.7 | 2026-09-17 | The Robokassa payment gateway for Woocommerce WordPress plugin before 1.8.9 does not verify the authenticity of incoming payment notifications when its non-default deferred… |
| CVE-2026-91008 | LOW | Patched | 3.7 | 2026-09-17 | The Event Booking Manager for WooCommerce WordPress plugin before 5.3.8 does not perform an ownership or authorization check before rendering booking confirmation details,… |
| CVE-2026-90951 | LOW | Patched | 3.7 | 2026-09-23 | The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing someone who holds… |
| CVE-2026-9088 | LOW | 2.7 | 2026-06-05 | A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users can bypass user profile permissions by accessing the g… | |
| CVE-2026-90850 | LOW | 2.4 | 2026-09-15 | A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The ma… | |
| CVE-2026-90845 | LOW | 3.5 | 2026-09-15 | A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipul… | |
| CVE-2026-90842 | LOW | 3.7 | 2026-09-15 | A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the file application/models/admin/Lo… | |
| CVE-2026-90835 | LOW | 3.5 | 2026-09-14 | A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the file Markdown.java of the component Page Content Ren… | |
| CVE-2026-90827 | LOW | 3.3 | 2026-09-14 | A vulnerability was identified in GPAC 26.07.0. This affects the function gf_node_deactivate_ex of the file scenegraph/base_scenegraph.c of the component MP4Box. Such manip… | |
| CVE-2026-90826 | LOW | 2.8 | 2026-09-14 | A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gf_node_del of the file scenegraph/base_scenegraph.c of the component MP4Box. This ma… | |
| CVE-2026-90825 | LOW | 3.3 | 2026-09-14 | A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gf_node_unregister of the file scenegraph/base_scenegraph.c of the component MP4Bo… | |
| CVE-2026-90824 | LOW | 3.3 | 2026-09-14 | A vulnerability has been found in GPAC 26.07.0. Affected is the function gf_sg_dom_event_bubble of the file src/scenegraph/dom_events.c of the component MP4Box. The manipul… | |
| CVE-2026-90811 | LOW | 3.3 | 2026-09-14 | A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects the function PermissionManager.checkShellCommand of the file mercury-agent/src/ca… | |
| CVE-2026-90799 | LOW | Patched | — | 2026-10-20 | Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to cause a denial of service via memory exhaustion. … |
| CVE-2026-90798 | LOW | Patched | — | 2026-10-20 | A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of servi… |
| CVE-2026-90773 | LOW | 3.2 | 2026-09-13 | procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with m… | |
| CVE-2026-90771 | LOW | 3.7 | 2026-09-13 | joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts __proto__ as an error code. Attackers … |