CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111061 | MEDIUM | 4.3 | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Pr… | — |
|
2026-10-19 |
| CVE-2026-111059 | MEDIUM | 6.1 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From… | — |
|
2026-10-19 |
| CVE-2025-7203 | MEDIUM | 4.9 | The Management Console and product files expose sensitive data, including remote log server credenti… | — |
|
2026-10-19 |
| CVE-2025-7043 | MEDIUM | 5.4 | The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be t… | — |
|
2026-10-19 |
| CVE-2025-6623 | MEDIUM | 4.3 | The carbon console accepts user-supplied XML input without sufficiently encoding potentially executa… | — |
|
2026-10-19 |
| CVE-2025-13591 | MEDIUM | 5.3 | The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response wh… | — |
|
2026-10-19 |
| CVE-2025-13173 | MEDIUM | 6.5 | Tokens associated with user sessions are not revoked when the corresponding user session is terminat… | — |
|
2026-10-19 |
| CVE-2026-112363 | MEDIUM | 5.3 | Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker… | — |
|
2026-10-19 |
| CVE-2026-112310 | MEDIUM | 4.3 | docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attacke… | — |
|
2026-10-19 |
| CVE-2026-112303 | MEDIUM | 4.3 | GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers … | — |
|
2026-10-19 |
| CVE-2026-112158 | MEDIUM | 6.5 | A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the functi… |
T1190
T1203
|
|
2026-10-19 |
| CVE-2026-109433 | MEDIUM | 6.5 | Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerabili… | — |
|
2026-10-19 |
| CVE-2026-107568 | MEDIUM | 6.5 | Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply a… | — |
|
2026-10-19 |
| CVE-2026-107566 | MEDIUM | 6.5 | Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set… | — |
|
2026-10-19 |
| CVE-2026-86375 | MEDIUM | 6.2 | Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive D… | — |
|
2026-10-19 |
| CVE-2026-112329 | MEDIUM | 4.3 | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the … | — |
|
2026-10-19 |
| CVE-2026-112328 | MEDIUM | 4.3 | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the … | — |
|
2026-10-19 |
| CVE-2026-112147 | MEDIUM | 5.3 | A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an… | — |
|
2026-10-19 |
| CVE-2026-112295 | MEDIUM | 5.4 | FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated us… | — |
|
2026-10-19 |
| CVE-2026-112294 | MEDIUM | 4.3 | FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.count… | — |
|
2026-10-19 |