CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118527 | MEDIUM | 4.3 | Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a… |
T1190
T1203
|
|
2026-11-03 |
| CVE-2026-63224 | NONE | — | OpenRemote is an open-source internet-of-things platform. Prior to 1.26.0, the `datapoint export` AP… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-63201 | NONE | — | Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Proto… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-63184 | HIGH | 7.1 | Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.1, the … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-63182 | HIGH | 8.1 | LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, XML securit… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-63121 | MEDIUM | 6.3 | Kubewarden policies is a collection of WebAssembly policies for securing and governing Kubernetes cl… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-63115 | MEDIUM | 5.3 | ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62347 | NONE | — | Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standa… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62277 | MEDIUM | 6.5 | LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Pr… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-55614 | NONE | — | uhttpd is a small HTTP server. In unpatched repository snapshots, `client_parse_header()` in `client… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-55613 | NONE | — | uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ubus_data_send()` in `ubus.c` … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-55612 | LOW | 3.7 | uhttpd is a small HTTP server. In unpatched repository snapshots, `client_poll_post_data()` in `clie… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-55147 | MEDIUM | 6.3 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provid… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-55146 | MEDIUM | 4.3 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provid… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-16760 | HIGH | 8.8 | In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds an imported… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118938 | HIGH | 8.8 | In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted __qualname… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-111578 | HIGH | 7.5 | The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from 5.16.2 before 5.16.5 does not… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-62991 | MEDIUM | 6.5 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1, the customer detail route `/cpanel/cu… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-62990 | HIGH | 8.7 | Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.10.1 and in the 3.0.… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-62989 | HIGH | 8.1 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0, the Variants Livewire component in `p… |
T1190
T1059
+1
|
|
2026-10-30 |