CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115386 | LOW | 2.6 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disc… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115369 | LOW | 2.2 | OpenBao from 2.5.0 before 2.6.2 fails to enforce the PKI role allowed_ip_sans_cidr restriction on IP… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-115366 | LOW | 2.6 | OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privile… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115364 | LOW | 2.2 | OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115363 | LOW | 3.3 | OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 contains an information disclosure vulnerability t… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115362 | LOW | 2.2 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in the AppRol… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115359 | LOW | 3.7 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsystem where … |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-115358 | LOW | 2.0 | OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115357 | LOW | 2.2 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenti… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-113875 | LOW | 3.1 | On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscripti… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-54238 | LOW | 3.1 | Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to versio… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-115246 | LOW | 3.5 | A weakness has been identified in subhajitkhan online-clinic-management-system up to e9ee77a8827a144… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115319 | LOW | 2.5 | fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexity vulnerability in maskAction… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-21812 | LOW | 2.2 | HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vul… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-21811 | LOW | 3.8 | HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114459 | LOW | 3.7 | A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can ca… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114457 | LOW | 3.7 | A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-88849 | LOW | 2.7 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.55 does not verify that a user tar… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-110011 | LOW | 2.7 | The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform a capab… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-109931 | LOW | 3.7 | The Infility Global WordPress plugin before 2.16.25 does not perform any authorisation or nonce chec… |
T1078
T1548
|
|
2026-10-22 |