CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-55612 | LOW | 3.7 | uhttpd is a small HTTP server. In unpatched repository snapshots, `client_poll_post_data()` in `clie… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-54610 | LOW | 3.3 | LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV_to_utf8()` in `src/… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-61694 | LOW | 3.7 | go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through the June 18, 2026 rev… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119334 | LOW | 2.2 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119330 | LOW | 3.5 | Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.0, the sh… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119602 | LOW | 3.7 | libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119571 | LOW | 3.7 | Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installa… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119570 | LOW | 3.1 | Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-100355 | LOW | 3.1 | Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message cont… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119567 | LOW | 3.1 | vsftpd through 3.0.5 contains an access control bypass vulnerability that allows authenticated FTP u… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119558 | LOW | 3.1 | OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119550 | LOW | 3.5 | Jellyfin through 12.4 contains an information disclosure vulnerability in PlaylistsController.GetPla… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119548 | LOW | 3.1 | Lago through 1.55.0 contains an authorization bypass vulnerability in Invoices::Payments::StripeServ… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119428 | LOW | 3.7 | phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenti… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119417 | LOW | 3.7 | CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 c… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119415 | LOW | 3.7 | CakePHP through 5.4.3 contains a header injection vulnerability in FormDataPart that allows attacker… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119377 | LOW | 2.5 | SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-101209 | LOW | 2.7 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) v… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-59385 | LOW | 2.7 | A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-115456 | LOW | 3.7 | A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that … |
T1190
T1203
|
|
2026-10-30 |