CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118527 | MEDIUM | 4.3 | Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a… |
T1190
T1203
|
|
2026-11-03 |
| CVE-2026-63121 | MEDIUM | 6.3 | Kubewarden policies is a collection of WebAssembly policies for securing and governing Kubernetes cl… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-63115 | MEDIUM | 5.3 | ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62277 | MEDIUM | 6.5 | LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Pr… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-55147 | MEDIUM | 6.3 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provid… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-55146 | MEDIUM | 4.3 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provid… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62991 | MEDIUM | 6.5 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1, the customer detail route `/cpanel/cu… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-62860 | MEDIUM | 5.3 | Picsou is a self-hosted personal finance dashboard. In the affected login implementation, the `/api/… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-62300 | MEDIUM | 6.5 | Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. In d… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-62254 | MEDIUM | 5.5 | LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R20… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-62250 | MEDIUM | 5.5 | LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-59993 | MEDIUM | 6.5 | Picotls is a TLS protocol library that allows users select different crypto backends based on their … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119343 | MEDIUM | 6.8 | Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. P… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119342 | MEDIUM | 5.3 | Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. F… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119340 | MEDIUM | 5.5 | Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in src/ccs… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119339 | MEDIUM | 5.5 | Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-55493 | MEDIUM | 6.5 | HotCRP is conference review software. Starting with 2.101, the `cmt:` search term checks whether a c… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-55098 | MEDIUM | 6.5 | Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-verified 26.0… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119730 | MEDIUM | 4.3 | Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that all… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119329 | MEDIUM | 4.3 | Immich is a high-performance self-hosted photo and video management solution. Prior to 3.0.0, GET /a… |
T1190
T1203
|
|
2026-10-30 |