CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-108304 | HIGH | 7.8 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. |
T1068
T1134
|
|
2026-10-27 |
| CVE-2026-108303 | HIGH | 8.8 | Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-108302 | MEDIUM | 4.3 | Tanium addressed an improper access controls vulnerability in Comply. |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-108301 | MEDIUM | 6.0 | Tanium addressed an improper access controls vulnerability in Comply. |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-102816 | NONE | — | An authorization vulnerability exists in the country or region configuration interface of TP-Link RE… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-102815 | NONE | — | An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-102814 | NONE | — | An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-102813 | NONE | — | An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verifi… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-102812 | NONE | — | A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-87897 | MEDIUM | 4.6 | A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can le… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-82986 | MEDIUM | 4.6 | The user in a group can bypass the group restriction set by an administrator on link sharing, creati… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-82984 | MEDIUM | 4.3 | When a team was configured as "visible to everyone", the web UI correctly blocked non-members from v… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-82983 | LOW | 3.3 | The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-77173 | MEDIUM | 4.3 | A user could create a docx or odt file with a # in the filename with confidential information such a… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-77172 | MEDIUM | 5.3 | App passwords were allowed to bypass password confirmation on sensitive endpoints. |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-77171 | LOW | 3.5 | A public shared collective always allowed recipients of the link to create pages. |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-77167 | HIGH | 7.5 | Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_externa… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-67400 | LOW | 3.5 | A missing token type check allowed to retrieve more additional information about the WOPI configurat… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-57201 | HIGH | 7.5 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1,… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-57198 | NONE | — | Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, a… |
T1190
T1059
+1
|
|
2026-10-27 |