Search
2,007 CVEs · Low severity
CVEs (2,007, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 1–25 of 2,007 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↑ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-90798 | LOW | Patched | — | 2026-10-20 | A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of servi… |
| CVE-2026-0316 | LOW | — | 2026-10-14 | A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript pa… | |
| CVE-2026-0311 | LOW | — | 2026-10-14 | A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from h… | |
| CVE-2026-103584 | LOW | — | 2026-09-30 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki CommonsMetadata extension allows Cross-Sit… | |
| CVE-2026-0317 | LOW | — | 2026-10-14 | A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS)… | |
| CVE-2026-103585 | LOW | — | 2026-09-30 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows Cross-Site Sc… | |
| CVE-2026-90799 | LOW | Patched | — | 2026-10-20 | Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to cause a denial of service via memory exhaustion. … |
| CVE-2026-75820 | LOW | Patched | — | 2026-10-06 | GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/writable.cpp. When loading a personal wordlist, the w… |
| CVE-2026-75818 | LOW | Patched | — | 2026-10-06 | GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a … |
| CVE-2026-75819 | LOW | Patched | — | 2026-10-06 | GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp. When loading a binary .rws dictionary file, it uses offset fields from t… |
| CVE-2026-76144 | LOW | — | 2026-10-01 | An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file t… | |
| CVE-2025-64059 | LOW | 1.8 | 2026-09-13 | Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is disputed because admins are allowed to modify templa… | |
| CVE-2026-71083 | LOW | 1.8 | 2026-08-18 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to e… | |
| CVE-2026-40000 | LOW | 1.8 | 2026-07-27 | The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications can launch this… | |
| CVE-2026-60964 | LOW | 1.9 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Query). Supported versions that are affected are 8.61 and 8.62. Diffi… | |
| CVE-2026-104116 | LOW | — | 2026-10-09 | A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to determine which z… | |
| CVE-2026-104117 | LOW | — | 2026-10-09 | A missing authorization check in the illumos IP management daemon (ipmgmtd) allows a local user to change the persistent IP multipathing (IPMP) configuration. The ipmgmtd d… | |
| CVE-2026-104807 | LOW | — | 2026-10-05 | DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content i… | |
| CVE-2026-104808 | LOW | — | 2026-10-05 | DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, … | |
| CVE-2026-105051 | LOW | 1.9 | 2026-10-02 | Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel). | |
| CVE-2026-83413 | LOW | 1.9 | 2026-09-15 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 an… | |
| CVE-2026-71146 | LOW | 1.9 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Diffi… | |
| CVE-2026-71081 | LOW | 1.9 | 2026-08-18 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to e… | |
| CVE-2026-115358 | LOW | Patched | 2.0 | 2026-10-22 | OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into audit logs by sending malformed plugin parameters. A… |
| CVE-2026-113715 | LOW | Patched | — | 2026-10-20 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines() and merge… |