Search
344 CVEs · Low severity
CVEs (344)
Showing 1–25 of 344
| CVE ID | Severity | Patch | CVSS | Published ↑ | Description |
|---|---|---|---|---|---|
| CVE-2026-111602 | LOW | 3.7 | 2026-10-17 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,… | |
| CVE-2026-92431 | LOW | Patched | 3.7 | 2026-10-17 | The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of te… |
| CVE-2025-71435 | LOW | Patched | 4.2 | 2026-10-17 | Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after OIDC token expiry when no refresh token is iss… |
| CVE-2026-111865 | LOW | 5.3 | 2026-10-17 | A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.p… | |
| CVE-2026-111868 | LOW | 6.3 | 2026-10-18 | A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pulsar-jms/src/main/java/com/datastax/oss/pulsar/jms/m… | |
| CVE-2026-111874 | LOW | 3.7 | 2026-10-18 | A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. This manipulation … | |
| CVE-2026-111875 | LOW | 4.7 | 2026-10-18 | A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveS… | |
| CVE-2026-111876 | LOW | 5.3 | 2026-10-18 | A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performi… | |
| CVE-2026-111877 | LOW | 4.3 | 2026-10-18 | A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571. This affects an unknown part of the file search.php. Executing a … | |
| CVE-2026-111942 | LOW | 4.3 | 2026-10-18 | A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument S… | |
| CVE-2026-111984 | LOW | 4.3 | 2026-10-18 | A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function create_item_html of the file modules/ui_extra_networks.py of … | |
| CVE-2026-111985 | LOW | 4.3 | 2026-10-18 | A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function read_metadata_from_safetensors of the file modules/sd_models.py of… | |
| CVE-2026-112004 | LOW | Patched | 3.1 | 2026-10-18 | Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a forei… |
| CVE-2026-111986 | LOW | 6.3 | 2026-10-18 | A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function get_obj_from_str of the file modules/sd_models.py of the compo… | |
| CVE-2026-112050 | LOW | Patched | 3.1 | 2026-10-18 | Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHub… |
| CVE-2026-111987 | LOW | 4.3 | 2026-10-18 | A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function read_metadata_from_safetensors of the fi… | |
| CVE-2026-111991 | LOW | 6.3 | 2026-10-18 | A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.__init__ of the file models/common.py of the… | |
| CVE-2026-111992 | LOW | 6.3 | 2026-10-18 | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of … | |
| CVE-2026-111993 | LOW | 3.3 | 2026-10-18 | A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/Admin… | |
| CVE-2026-97204 | LOW | 3.1 | 2026-10-18 | Deleting a label compared the ID of the repository in the request against the organization ID of organization labels, and the two ID sequences overlap. A user with write ac… | |
| CVE-2026-112026 | LOW | 3.7 | 2026-10-18 | A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the function sha1… | |
| CVE-2026-112029 | LOW | 2.5 | 2026-10-18 | A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.class.php of the component SHA1 Ha… | |
| CVE-2026-112112 | LOW | — | 2026-10-18 | An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the addr… | |
| CVE-2026-112030 | LOW | 6.3 | 2026-10-19 | A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulat… | |
| CVE-2026-112031 | LOW | 3.5 | 2026-10-19 | A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.ph… |