Search
6,058 CVEs · Medium severity
CVEs (6,058, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 1–25 of 6,058 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↑ | Description |
|---|---|---|---|---|---|
| CVE-2026-92529 | MEDIUM | Patched | 4.3 | 2026-09-24 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could h… |
| CVE-2026-92530 | MEDIUM | Patched | 4.3 | 2026-09-24 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions coul… |
| CVE-2026-92874 | MEDIUM | Patched | 5.4 | 2026-09-24 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions coul… |
| CVE-2026-96739 | MEDIUM | 4.3 | 2026-09-24 | A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/upload_json.php of the component KindEditor Upload Int… | |
| CVE-2026-96763 | MEDIUM | 5.4 | 2026-09-24 | A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the function ScopedSegmentAccess::MountSegment of the fi… | |
| CVE-2026-96764 | MEDIUM | 4.3 | 2026-09-24 | A weakness has been identified in kvcache-ai mooncake up to 0.3.12/0.3.14-rc1. Impacted is the function MasterService::GetReplicaListByRegex of the component Regular Expres… | |
| CVE-2026-96772 | MEDIUM | 5.3 | 2026-09-24 | A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of … | |
| CVE-2026-96773 | MEDIUM | 4.3 | 2026-09-24 | A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the compone… | |
| CVE-2026-96774 | MEDIUM | 5.3 | 2026-09-24 | A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.3_20181106 Build 107. This affects the function loadCfg of the file /ini/sys_cfg.txt of… | |
| CVE-2026-96777 | MEDIUM | 6.3 | 2026-09-24 | A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.adm_server.php?r=adm/us… | |
| CVE-2026-96880 | MEDIUM | 5.3 | 2026-09-24 | A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/controller/v1/Bo… | |
| CVE-2026-97056 | MEDIUM | Patched | 6.8 | 2026-09-24 | SigNoz versions from v0.98.0 up to (but not including) v0.143.0, when configured to use the opaque session tokenizer (which was not the default before v0.143.0), do not rev… |
| CVE-2026-96881 | MEDIUM | 5.3 | 2026-09-24 | A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/… | |
| CVE-2026-96882 | MEDIUM | 5.3 | 2026-09-24 | A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/tal… | |
| CVE-2026-96884 | MEDIUM | 6.3 | 2026-09-24 | A security flaw has been discovered in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.cs of the component Preview. The… | |
| CVE-2026-97149 | MEDIUM | Patched | — | 2026-09-24 | In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method, expiry, and pat… |
| CVE-2026-96892 | MEDIUM | 4.3 | 2026-09-24 | A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument … | |
| CVE-2026-97155 | MEDIUM | Patched | 6.5 | 2026-09-24 | Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origin… |
| CVE-2026-74991 | MEDIUM | Patched | 6.8 | 2026-09-24 | The WPForms WordPress plugin before 2.0.2 does not verify that a Stripe payment object supplied during a public form submission belongs to it before acting on it, allowing… |
| CVE-2026-80338 | MEDIUM | Patched | 6.8 | 2026-09-24 | The CMB2 WordPress plugin before 2.13.0 does not perform any capability check on one of its AJAX actions, allowing users with a role as low as Subscriber to create arbitrar… |
| CVE-2026-82195 | MEDIUM | Patched | 6.5 | 2026-09-24 | The 10Web Booster WordPress plugin before 2.34.0 does not restrict access to the routine which issues the shared secret that authenticates its cloud connection, disclosing… |
| CVE-2026-82849 | MEDIUM | Patched | 4.3 | 2026-09-24 | The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the course-progress records being returned, allowing any authenticate… |
| CVE-2026-82850 | MEDIUM | Patched | 4.3 | 2026-09-24 | The Masteriyo LMS WordPress plugin before 3.4.2 does not restrict access to quiz answer keys, allowing any authenticated user, such as a student, to retrieve the correct a… |
| CVE-2026-88845 | MEDIUM | Patched | 4.3 | 2026-09-24 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, allowing any a… |
| CVE-2026-88846 | MEDIUM | Patched | 5.3 | 2026-09-24 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not check whether user registration is enabled on the site before creating an account through one … |