CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119187 | HIGH | 7.5 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript.… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-9536 | HIGH | 7.5 | A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets func… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-9535 | HIGH | 8.2 | A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (ve… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-8824 | HIGH | 7.5 | A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionalit… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-8822 | HIGH | 7.5 | A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (vers… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-42057 | HIGH | 7.5 | An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functio… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-41216 | HIGH | 7.5 | An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation function… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119250 | HIGH | 7.8 | A malicious actor with local access and low privileges could exploit an External Control of File Nam… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-119249 | HIGH | 7.5 | A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address v… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119168 | HIGH | 8.8 | HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocati… |
T1068
T1134
|
|
2026-10-29 |
| CVE-2026-118782 | HIGH | 7.5 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript.… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118779 | HIGH | 7.5 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript.… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-118772 | HIGH | 7.5 | joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 an… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-51905 | HIGH | 8.8 | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107347 | HIGH | 8.4 | HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-11587 | HIGH | 7.2 | SQL injection allowing an authenticated user with access to ACL management to read and modify the Ce… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-119115 | HIGH | 8.5 | Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (a… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118763 | HIGH | 7.4 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, pa… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118761 | HIGH | 7.5 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118759 | HIGH | 7.5 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. … |
T1190
T1203
|
|
2026-10-29 |