Search
344 CVEs · Low severity
CVEs (344)
Showing 1–25 of 344
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-9825 | LOW | 3.7 | 2026-10-20 | IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attack… | |
| CVE-2026-97204 | LOW | 3.1 | 2026-10-18 | Deleting a label compared the ID of the repository in the request against the organization ID of organization labels, and the two ID sequences overlap. A user with write ac… | |
| CVE-2026-96901 | LOW | Patched | 3.7 | 2026-10-21 | The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.2.0 does not verify the integrity of its cart-recovery token before acting on it and still accepts … |
| CVE-2026-96392 | LOW | 3.5 | 2026-10-22 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: fr… | |
| CVE-2026-96387 | LOW | 3.8 | 2026-10-22 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator login allows Authentication Bypass. This issue affects Stop administrato… | |
| CVE-2026-96384 | LOW | 3.5 | 2026-10-22 | Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9. | |
| CVE-2026-96373 | LOW | 3.3 | 2026-10-22 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| CVE-2026-96369 | LOW | 3.1 | 2026-10-22 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issu… | |
| CVE-2026-96360 | LOW | 3.5 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects W… | |
| CVE-2026-95721 | LOW | 3.3 | 2026-10-22 | A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with lo… | |
| CVE-2026-95620 | LOW | — | 2026-10-23 | A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the c… | |
| CVE-2026-92431 | LOW | Patched | 3.7 | 2026-10-17 | The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of te… |
| CVE-2026-91831 | LOW | Patched | 3.8 | 2026-10-19 | The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name setting before using it in e-mail headers, allo… |
| CVE-2026-91650 | LOW | 3.7 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthentic… | |
| CVE-2026-91616 | LOW | 3.7 | 2026-10-20 | Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). Supported versions that are aff… | |
| CVE-2026-91614 | LOW | 3.3 | 2026-10-20 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.… | |
| CVE-2026-91613 | LOW | 3.3 | 2026-10-20 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.… | |
| CVE-2026-91612 | LOW | 3.3 | 2026-10-20 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.… | |
| CVE-2026-91582 | LOW | 3.7 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). The supported version that is affected is 12.2.1.… | |
| CVE-2026-91485 | LOW | 3.8 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.2. D… | |
| CVE-2026-91477 | LOW | 3.1 | 2026-10-20 | Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle JavaFX: 25.0.4 and 27. Difficult to expl… | |
| CVE-2026-91471 | LOW | 3.7 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: BAM Framework). The supported version that is affected i… | |
| CVE-2026-91461 | LOW | 3.7 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are aff… | |
| CVE-2026-91436 | LOW | 3.9 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult t… | |
| CVE-2026-91427 | LOW | 2.3 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily expl… |