CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-117862 | NONE | — | Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerab… |
T1068
T1134
|
|
2026-10-27 |
| CVE-2026-117861 | NONE | — | Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefo… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117860 | NONE | — | Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117603 | MEDIUM | 4.3 | Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plu… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117602 | HIGH | 8.4 | Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which ex… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117601 | HIGH | 7.5 | Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool trans… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117573 | HIGH | 7.8 | hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117570 | MEDIUM | 5.2 | Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-117569 | HIGH | 7.8 | Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117568 | HIGH | 7.0 | mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117567 | HIGH | 7.8 | esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117566 | MEDIUM | 5.3 | EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-117565 | MEDIUM | 5.3 | Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allo… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-117564 | CRITICAL | 9.8 | nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated … |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-117563 | MEDIUM | 5.4 | MrDoc through 1.1.1 contains a broken access control vulnerability in the manage_doc_share type 3 br… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117562 | MEDIUM | 5.3 | rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticate… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-117561 | HIGH | 7.8 | Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers … |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-117560 | HIGH | 7.8 | ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117559 | HIGH | 7.8 | DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117558 | HIGH | 7.8 | The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that all… |
T1190
T1203
|
|
2026-10-27 |