CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119423 | MEDIUM | 5.3 | OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attac… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119422 | MEDIUM | 5.9 | Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauth… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119421 | MEDIUM | 5.9 | Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119416 | MEDIUM | 4.8 | CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119414 | MEDIUM | 4.3 | Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vuln… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119378 | MEDIUM | 5.5 | SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows att… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119376 | MEDIUM | 5.5 | SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the S… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119375 | MEDIUM | 5.5 | SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read … |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119372 | MEDIUM | 5.5 | SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-fr… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119371 | MEDIUM | 5.5 | SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the S… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119364 | MEDIUM | 5.3 | ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link-following vulnerability in mo… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119147 | MEDIUM | 4.3 | ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy-file exten… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119146 | MEDIUM | 5.6 | ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-59396 | MEDIUM | 4.9 | A denial-of-service vulnerability exists in UAA's private_key_jwt client-authentication mechanism. W… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-59388 | MEDIUM | 6.5 | Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-59386 | MEDIUM | 6.5 | A SpaceSupporter could improperly modify an application's start command and buildpack—actions requir… |
T1068
T1134
|
|
2026-10-30 |
| CVE-2026-115455 | MEDIUM | 6.5 | A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-chara… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-114691 | MEDIUM | 5.9 | A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-114690 | MEDIUM | 6.2 | A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parall… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118952 | MEDIUM | 6.5 | A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a… |
T1190
T1059
+1
|
|
2026-10-30 |