Search
1,599 CVEs · Medium severity
CVEs (1,599, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 1–25 of 1,599 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111809 | MEDIUM | Patched | 9.3 | 2026-10-21 | Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transfer-Encoding. This issue affects Apache Traffic Server: from 8.0.0 thr… |
| CVE-2026-112778 | MEDIUM | Patched | 8.8 | 2026-10-19 | Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kubernetes Ingress provider, allowing references t… |
| CVE-2026-115513 | MEDIUM | Patched | 8.7 | 2026-10-22 | OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript payloads by setting a … |
| CVE-2026-13599 | MEDIUM | 7.8 | 2026-10-22 | Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0. | |
| CVE-2026-115810 | MEDIUM | Patched | 7.7 | 2026-10-23 | Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server … |
| CVE-2026-115416 | MEDIUM | 7.7 | 2026-10-22 | Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated user to read AWS account identifiers and SQL statement… | |
| CVE-2026-110491 | MEDIUM | 7.5 | 2026-10-22 | The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connect… | |
| CVE-2026-114656 | MEDIUM | Patched | 7.5 | 2026-10-22 | Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that allows unauthenticated clients to skip client-certificate checks because negated Host… |
| CVE-2026-112391 | MEDIUM | Patched | 7.5 | 2026-10-19 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit while reading nested PDF objects. The parser follows… |
| CVE-2026-114221 | MEDIUM | 7.4 | 2026-10-22 | NT OneAPP developed by NewType Infortech has a Credential Disclosure vulnerability. Unauthenticated remote attackers can trigger an HTTP Basic Authentication challenge from… | |
| CVE-2026-115323 | MEDIUM | Patched | 7.3 | 2026-10-22 | EverShop 1.2.2 before 2.2.1 contains a missing authorization vulnerability in the customer address API that allows unauthenticated attackers to manage other customers' addr… |
| CVE-2026-114577 | MEDIUM | 7.3 | 2026-10-22 | A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Insertion Handler. Th… | |
| CVE-2026-114439 | MEDIUM | 7.3 | 2026-10-21 | A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Se… | |
| CVE-2026-114440 | MEDIUM | 7.3 | 2026-10-21 | A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomer_i… | |
| CVE-2026-114441 | MEDIUM | 7.3 | 2026-10-21 | A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argu… | |
| CVE-2026-114267 | MEDIUM | 7.3 | 2026-10-21 | A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results i… | |
| CVE-2026-114262 | MEDIUM | 7.3 | 2026-10-21 | A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file app/Http/Controllers/FileContr… | |
| CVE-2026-114263 | MEDIUM | 7.3 | 2026-10-21 | A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqli_query of the file individual_report_sear… | |
| CVE-2026-114259 | MEDIUM | 7.3 | 2026-10-21 | A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function save_files of the file admin_class.p… | |
| CVE-2026-114261 | MEDIUM | 7.3 | 2026-10-21 | A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function index/store/update/destroy of the fi… | |
| CVE-2026-114258 | MEDIUM | 7.3 | 2026-10-21 | A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of… | |
| CVE-2026-114257 | MEDIUM | 7.3 | 2026-10-21 | A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the fun… | |
| CVE-2026-114256 | MEDIUM | 7.3 | 2026-10-21 | A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function save_folder/delete_folder/de… | |
| CVE-2026-114254 | MEDIUM | 7.3 | 2026-10-21 | A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file admin_cla… | |
| CVE-2026-114255 | MEDIUM | 7.3 | 2026-10-21 | A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function save_user of the file … |