CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-112268 | MEDIUM | 6.3 | sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that … |
T1190
T1203
|
|
2026-10-19 |
| CVE-2026-112267 | MEDIUM | 6.5 | SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery v… | — |
|
2026-10-19 |
| CVE-2026-112266 | MEDIUM | 5.9 | SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort ot… | — |
|
2026-10-19 |
| CVE-2026-112265 | MEDIUM | 6.5 | LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauth… | — |
|
2026-10-19 |
| CVE-2026-112222 | MEDIUM | 5.4 | Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configu… | — |
|
2026-10-19 |
| CVE-2026-112144 | MEDIUM | 5.3 | A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f4… | — |
|
2026-10-19 |
| CVE-2026-111939 | MEDIUM | 4.6 | Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticat… | — |
|
2026-10-19 |
| CVE-2026-111938 | MEDIUM | 4.3 | Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sa… | — |
|
2026-10-19 |
| CVE-2026-111937 | MEDIUM | 5.4 | Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sa… | — |
|
2026-10-19 |
| CVE-2026-111936 | MEDIUM | 4.3 | Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because valida… | — |
|
2026-10-19 |
| CVE-2026-111925 | MEDIUM | 5.3 | Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to a… | — |
|
2026-10-19 |
| CVE-2026-111915 | MEDIUM | 5.9 | Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote a… | — |
|
2026-10-19 |
| CVE-2026-111899 | MEDIUM | 4.3 | KitchenOwl through 0.7.10 contains a server-side request forgery vulnerability in recipe import that… | — |
|
2026-10-19 |
| CVE-2026-111883 | MEDIUM | 5.4 | Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attacke… | — |
|
2026-10-19 |
| CVE-2026-111829 | MEDIUM | 6.5 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio… | — |
|
2026-10-19 |
| CVE-2026-111828 | MEDIUM | 4.3 | Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listin… | — |
|
2026-10-19 |
| CVE-2026-110902 | MEDIUM | 4.3 | Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Ticke… | — |
|
2026-10-19 |
| CVE-2026-110008 | MEDIUM | 4.2 | @fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versions 7.2.0 through 8.3.1, the st… | — |
|
2026-10-19 |
| CVE-2026-38671 | MEDIUM | 6.1 | Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service (StudentRegi… | — |
|
2026-10-19 |
| CVE-2026-112214 | MEDIUM | 6.5 | A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index objec… | — |
|
2026-10-19 |