Search
14,262 CVEs · Medium severity
CVEs (14,262, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 1–25 of 14,262 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-82041 | MEDIUM | Patched | 9.9 | 2026-10-02 | UTMStack before 11.2.16 contains a missing authorization vulnerability in UTMIncidentCommandWebsocket.processCommand(), the handler mapped to the /command/{hostname} STOMP … |
| CVE-2026-102780 | MEDIUM | Patched | 9.8 | 2026-10-05 | Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both … |
| CVE-2026-68979 | MEDIUM | Patched | 9.8 | 2026-08-03 | Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on components referencing Parameter values… |
| CVE-2026-21662 | MEDIUM | Patched | 9.8 | 2026-07-31 | Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee:… |
| CVE-2026-66756 | MEDIUM | Patched | 9.8 | 2026-07-30 | Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgra… |
| CVE-2026-111809 | MEDIUM | Patched | 9.3 | 2026-10-21 | Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transfer-Encoding. This issue affects Apache Traffic Server: from 8.0.0 thr… |
| CVE-2026-81535 | MEDIUM | Patched | 9.1 | 2026-10-07 | In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcp… |
| CVE-2026-89134 | MEDIUM | 9.1 | 2026-09-27 | A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress) bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallbac… | |
| CVE-2026-72748 | MEDIUM | 9.1 | 2026-08-11 | AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json.php endpoint that allows remote attackers to write up to 4 GB of arbitr… | |
| CVE-2026-75130 | MEDIUM | 9.0 | 2026-08-18 | Context7 through 2.1.2 contains a prompt injection vulnerability that allows attackers to execute malicious instructions in connected AI coding agents by injecting unsaniti… | |
| CVE-2026-18245 | MEDIUM | Patched | 9.0 | 2026-07-30 | Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user brow… |
| CVE-2026-112778 | MEDIUM | Patched | 8.8 | 2026-10-19 | Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kubernetes Ingress provider, allowing references t… |
| CVE-2026-11731 | MEDIUM | 8.8 | 2026-10-13 | An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management s… | |
| CVE-2026-11732 | MEDIUM | 8.8 | 2026-10-13 | An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having n… | |
| CVE-2026-83742 | MEDIUM | Patched | 8.8 | 2026-10-07 | Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to wr… |
| CVE-2026-100748 | MEDIUM | Patched | 8.8 | 2026-09-27 | Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0 |
| CVE-2026-72775 | MEDIUM | Patched | 8.8 | 2026-08-11 | n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the PostgresTrigger node, which interpolates user-supplied identifier parameters (channel,… |
| CVE-2026-72750 | MEDIUM | Patched | 8.8 | 2026-08-11 | n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node's Execute Query operation, which interpolates expression values directl… |
| CVE-2026-72764 | MEDIUM | Patched | 8.8 | 2026-08-11 | n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions (before 1.123.67, 2.31.5, and 2.32.1), a user able to… |
| CVE-2026-115513 | MEDIUM | Patched | 8.7 | 2026-10-22 | OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript payloads by setting a … |
| CVE-2026-78213 | MEDIUM | 8.7 | 2026-08-24 | Heptabase developed by Hepta Platforms, Inc. has a Stored Cross-Site Scripting vulnerability. Authenticated remote attackers can inject persistent malicious content into sp… | |
| CVE-2026-77811 | MEDIUM | 8.7 | 2026-08-21 | Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards… | |
| CVE-2026-58157 | MEDIUM | Patched | 8.7 | 2026-07-29 | Apache Traffic Server can reuse server sessions and tunnels improperly, exposing data across client connections. This issue affects Apache Traffic Server: from 8.0.0 thr… |
| CVE-2026-18953 | MEDIUM | Patched | 8.6 | 2026-08-05 | Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-de… |
| CVE-2026-56389 | MEDIUM | 8.6 | 2026-07-29 | GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file … |