CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-79824 | HIGH | 8.0 | A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite ar… | — |
|
2026-10-15 |
| CVE-2026-44084 | HIGH | 7.5 | An authorization bypass through user-controlled key vulnerability has been reported to affect Video … | — |
|
2026-10-15 |
| CVE-2026-26245 | HIGH | 8.8 | A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains … | — |
|
2026-10-15 |
| CVE-2026-26244 | HIGH | 8.8 | A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains … | — |
|
2026-10-15 |
| CVE-2026-109855 | HIGH | 7.5 | undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSoc… | — |
|
2026-10-15 |
| CVE-2026-101290 | HIGH | 7.5 | A remote attacker may send a specially crafted network packet that causes the affected application t… | — |
|
2026-10-15 |
| CVE-2024-22031 | HIGH | 8.5 | A vulnerability has been identified within Rancher where a user with the ability to create a project… | — |
|
2026-10-15 |
| CVE-2023-32198 | HIGH | 8.0 | A vulnerability has been identified in Steve where by default it was using an insecure option that d… | — |
|
2026-10-15 |
| CVE-2026-101311 | HIGH | 7.0 | The framebuffer device model's maximum resolution constants were duplicated between the framebuffer … | — |
|
2026-10-15 |
| CVE-2026-101310 | HIGH | 7.0 | The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when s… | — |
|
2026-10-15 |
| CVE-2026-101309 | HIGH | 7.0 | The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest. T… | — |
|
2026-10-15 |
| CVE-2026-96537 | HIGH | 7.5 | The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that r… | — |
|
2026-10-15 |
| CVE-2026-81534 | HIGH | 8.8 | The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Executi… | — |
|
2026-10-15 |
| CVE-2026-79822 | HIGH | 7.1 | A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and pot… | — |
|
2026-10-15 |
| CVE-2026-79821 | HIGH | 8.2 | A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system … | — |
|
2026-10-15 |
| CVE-2026-74920 | HIGH | 7.1 | The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input… | — |
|
2026-10-15 |
| CVE-2026-58098 | HIGH | 8.4 | When semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Up… | — |
|
2026-10-15 |
| CVE-2026-101305 | HIGH | 8.8 | renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could r… | — |
|
2026-10-15 |
| CVE-2026-101303 | HIGH | 7.5 | The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback… | — |
|
2026-10-15 |
| CVE-2026-88043 | HIGH | 7.2 | The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_ty… | — |
|
2026-10-15 |