CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-14288 | LOW | 3.1 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 bef… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-112326 | LOW | 3.1 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 bef… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-105711 | LOW | 3.5 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-103515 | LOW | 2.7 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 bef… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114377 | LOW | 3.8 | A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this … |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-18748 | LOW | 3.5 | The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, … |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-114124 | LOW | 3.9 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and C… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-114122 | LOW | 3.9 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and C… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-113797 | LOW | 3.1 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and C… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-114472 | LOW | 3.7 | Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer … | — |
|
2026-10-21 |
| CVE-2026-114370 | LOW | 3.7 | A flaw was found in the PathResourceManager component of the Undertow web server. This component is … | — |
|
2026-10-21 |
| CVE-2026-87096 | LOW | 3.3 | Sensitive information disclosure and manipulation due to improper authorization checks. The followin… | — |
|
2026-10-21 |
| CVE-2026-35501 | LOW | 3.7 | When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trus… | — |
|
2026-10-21 |
| CVE-2026-114236 | LOW | 3.3 | storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious … | — |
|
2026-10-21 |
| CVE-2026-104642 | LOW | 2.7 | The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices agai… | — |
|
2026-10-21 |
| CVE-2026-96901 | LOW | 3.7 | The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.2.0 does not verify the int… | — |
|
2026-10-21 |
| CVE-2026-105257 | LOW | 2.7 | The Appointment Booking Plugin WordPress plugin before 5.7.5 does not verify that an authenticated … | — |
|
2026-10-21 |
| CVE-2026-114040 | LOW | 3.5 | A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is th… | — |
|
2026-10-21 |
| CVE-2026-114115 | LOW | 3.7 | Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that rea… | — |
|
2026-10-21 |
| CVE-2026-114071 | LOW | 3.1 | Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated p… | — |
|
2026-10-21 |