CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-109829 | HIGH | 7.4 | undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.1… | — |
|
2026-10-15 |
| CVE-2026-109383 | HIGH | 7.4 | undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0… | — |
|
2026-10-15 |
| CVE-2026-108334 | HIGH | 7.4 | A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generat… | — |
|
2026-10-15 |
| CVE-2026-104828 | HIGH | 7.2 | HtmlUnit Neko is an HtmlUnit adaptation of NekoHTML. Prior to 5.4.0, HTMLWriterFilter writes decoded… | — |
|
2026-10-15 |
| CVE-2026-104827 | HIGH | 7.5 | react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 1.… | — |
|
2026-10-15 |
| CVE-2026-55246 | HIGH | 7.8 | bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookie_init_file() in bincookie.… | — |
|
2026-10-15 |
| CVE-2026-55103 | HIGH | 8.6 | Discourse ActivityPub adds ActivityPub support to Discourse. Prior to commit 1c8518b0f2abdf31cbea3e0… | — |
|
2026-10-15 |
| CVE-2026-111105 | HIGH | 7.0 | Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows r… | — |
|
2026-10-15 |
| CVE-2026-103936 | HIGH | 7.5 | libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 6.0.28, the @libp2p/w… | — |
|
2026-10-15 |
| CVE-2026-85634 | HIGH | 8.8 | A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core libra… | — |
|
2026-10-15 |
| CVE-2026-61611 | HIGH | 7.5 | Lychee is a free, open-source photo-management tool. Prior to 7.6.1, POST /api/v2/Album::unlock has … | — |
|
2026-10-15 |
| CVE-2026-105065 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-15 |
| CVE-2026-100409 | HIGH | 7.5 | OpenNext Cloudflare is an open Next.js adapter for Cloudflare. From 0.3.0 until 1.20.2, applications… | — |
|
2026-10-15 |
| CVE-2026-100354 | HIGH | 7.5 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.149.0, runtime request, response,… | — |
|
2026-10-15 |
| CVE-2026-100353 | HIGH | 7.5 | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3fi… | — |
|
2026-10-15 |
| CVE-2026-97394 | HIGH | 7.5 | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter a… | — |
|
2026-10-15 |
| CVE-2026-95155 | HIGH | 7.5 | FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.… | — |
|
2026-10-15 |
| CVE-2026-92982 | HIGH | 8.5 | A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 … | — |
|
2026-10-15 |
| CVE-2026-71490 | HIGH | 7.1 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11, OPNsense\Core\ACL::hasP… | — |
|
2026-10-15 |
| CVE-2026-63442 | HIGH | 8.1 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthentic… | — |
|
2026-10-15 |