CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-57202 | HIGH | 8.1 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1,… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-57188 | NONE | — | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1,… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-16491 | MEDIUM | 6.5 | Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder admini… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-118132 | NONE | — | NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugi… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-118131 | NONE | — | GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Contr… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117526 | MEDIUM | 5.3 | A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the fun… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117516 | HIGH | 7.3 | A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unk… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-117515 | HIGH | 7.3 | A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-116682 | HIGH | 8.6 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116680 | MEDIUM | 6.4 | HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates gene… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116679 | MEDIUM | 5.4 | Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 unti… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116678 | MEDIUM | 5.8 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultward… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-116677 | NONE | — | OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, upd… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116676 | HIGH | 8.8 | Atlantis is a self-hosted golang application that listens for Terraform pull request events via webh… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116662 | HIGH | 7.5 | Tanium addressed a compression bomb vulnerability in Enforce. |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116660 | MEDIUM | 4.3 | Tanium addressed an improper access controls vulnerability in Enforce. |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116659 | MEDIUM | 4.3 | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116658 | MEDIUM | 6.5 | Tanium addressed a denial of service vulnerability in Enforce. |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116657 | MEDIUM | 5.3 | Tanium addressed a denial of service vulnerability in Enforce. |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116656 | HIGH | 7.5 | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. |
T1190
T1059
+1
|
|
2026-10-27 |