CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-96582 | MEDIUM | 4.9 | A HID report descriptor is a sequence of items, each declaring in its header how many data bytes fol… | — |
|
2026-10-20 |
| CVE-2026-96406 | MEDIUM | 4.9 | A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTo… | — |
|
2026-10-20 |
| CVE-2026-113393 | MEDIUM | 6.3 | A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some u… | — |
|
2026-10-20 |
| CVE-2026-113470 | MEDIUM | 5.4 | Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulner… |
T1190
T1203
|
|
2026-10-20 |
| CVE-2026-113401 | MEDIUM | 6.5 | Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and T… | — |
|
2026-10-20 |
| CVE-2026-113400 | MEDIUM | 5.4 | Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 15… | — |
|
2026-10-20 |
| CVE-2026-18205 | MEDIUM | 6.1 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i… | — |
|
2026-10-20 |
| CVE-2026-113583 | MEDIUM | 6.1 | Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allo… | — |
|
2026-10-20 |
| CVE-2026-113496 | MEDIUM | 5.0 | A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, … | — |
|
2026-10-20 |
| CVE-2026-113495 | MEDIUM | 5.0 | A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens a… | — |
|
2026-10-20 |
| CVE-2026-113388 | MEDIUM | 4.3 | A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the fu… | — |
|
2026-10-20 |
| CVE-2026-113385 | MEDIUM | 5.3 | A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affe… | — |
|
2026-10-20 |
| CVE-2026-113384 | MEDIUM | 4.3 | A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of th… | — |
|
2026-10-20 |
| CVE-2026-113383 | MEDIUM | 4.3 | A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the fi… | — |
|
2026-10-20 |
| CVE-2026-113382 | MEDIUM | 6.3 | A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is … | — |
|
2026-10-20 |
| CVE-2026-113355 | MEDIUM | 4.8 | Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account admi… | — |
|
2026-10-20 |
| CVE-2026-113354 | MEDIUM | 6.5 | Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users wit… | — |
|
2026-10-20 |
| CVE-2026-113353 | MEDIUM | 5.4 | LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, … | — |
|
2026-10-20 |
| CVE-2026-113351 | MEDIUM | 5.9 | libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zero… | — |
|
2026-10-20 |
| CVE-2026-113350 | MEDIUM | 5.4 | react-admin before 5.15.5 contains a stored cross-site scripting vulnerability that allows attackers… | — |
|
2026-10-20 |