CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-92263 | HIGH | 7.2 | SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, … | — |
|
2026-10-16 |
| CVE-2026-77630 | HIGH | 7.5 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 22.0.4, pars… | — |
|
2026-10-16 |
| CVE-2026-57488 | HIGH | 7.1 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_t… | — |
|
2026-10-16 |
| CVE-2026-57487 | HIGH | 7.5 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Trans… | — |
|
2026-10-16 |
| CVE-2026-57486 | HIGH | 7.5 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlN… | — |
|
2026-10-16 |
| CVE-2026-48741 | HIGH | 7.5 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS,… | — |
|
2026-10-16 |
| CVE-2026-48503 | HIGH | 7.5 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS,… | — |
|
2026-10-16 |
| CVE-2026-46472 | HIGH | 7.5 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the … | — |
|
2026-10-16 |
| CVE-2026-42270 | HIGH | 7.5 | countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 a… | — |
|
2026-10-16 |
| CVE-2026-42269 | HIGH | 8.1 | countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 a… | — |
|
2026-10-16 |
| CVE-2026-41582 | HIGH | 7.5 | countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 a… | — |
|
2026-10-16 |
| CVE-2026-102941 | HIGH | 7.5 | The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering a… | — |
|
2026-10-16 |
| CVE-2026-88755 | HIGH | 7.8 | Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers decla… | — |
|
2026-10-16 |
| CVE-2026-107621 | HIGH | 7.5 | JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream. | — |
|
2026-10-16 |
| CVE-2026-106705 | HIGH | 8.8 | ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role managem… | — |
|
2026-10-16 |
| CVE-2026-105667 | HIGH | 7.5 | In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authen… | — |
|
2026-10-16 |
| CVE-2026-105273 | HIGH | 7.5 | MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no f… | — |
|
2026-10-16 |
| CVE-2026-101021 | HIGH | 7.5 | MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted … | — |
|
2026-10-16 |
| CVE-2026-111413 | HIGH | 8.8 | Cross-Site Request Forgery (CSRF) vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-… | — |
|
2026-10-16 |
| CVE-2026-63618 | HIGH | 7.5 | Exposure of Sensitive Information (system level configuration info) to an Unauthorized Actor vulnera… | — |
|
2026-10-16 |