CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-112352 | CRITICAL | 9.1 | Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauth… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-112351 | HIGH | 8.8 | Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-112350 | HIGH | 7.5 | Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpo… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-103995 | NONE | — | Response body and chunk parsing would handle non-hex or negative integers incorrectly which could re… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-118180 | NONE | — | When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server'… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-118179 | NONE | — | Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without askin… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-118178 | NONE | — | A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-118177 | NONE | — | When looking for calendars in a directory on a server, during account setup or when adding a new net… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-118176 | NONE | — | Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network share… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-118175 | NONE | — | When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed par… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-118174 | NONE | — | When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-118173 | NONE | — | MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete valid… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-118172 | NONE | — | The strapi/strapi (Core Admin / Webhook Runner) package is vulnerable to a semi-blind SSRF via a web… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-118171 | NONE | — | The strapi/content-manager package is missing content-scope authorization in the content manager pre… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-118170 | NONE | — | The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116683 | NONE | — | CTFer.io's CTFd Terraform Provider manages CTFd resources as code. From 0.1.5 until 2.8.2, ctfd_team… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-115413 | HIGH | 7.8 | Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before vers… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-88812 | HIGH | 7.8 | A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-87086 | HIGH | 7.5 | Tanium addressed a denial of service vulnerability in Provision. |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-87085 | MEDIUM | 6.3 | Tanium addressed a SQL injection vulnerability in Provision. |
T1190
T1005
+1
|
|
2026-10-27 |