CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-100164 | HIGH | 7.5 | Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-90732 | MEDIUM | 4.9 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release ve… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-90731 | MEDIUM | 4.9 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release version… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-90730 | MEDIUM | 6.5 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release version… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-90729 | MEDIUM | 6.7 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release version… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-90728 | MEDIUM | 6.3 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release version… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-56084 | MEDIUM | 5.8 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release version… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-4337 | NONE | — | Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a un… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-41022 | MEDIUM | 5.9 | Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-41021 | HIGH | 7.5 | Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash,… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-41020 | HIGH | 7.5 | Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacke… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-13162 | NONE | — | An OS command vulnerability exists in CoreTec product that allows authenticated users with certain r… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-117499 | LOW | 3.7 | @fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default ro… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-115408 | MEDIUM | 5.5 | In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8`, the ML-KEM key-pa… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-115216 | NONE | — | In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-113644 | NONE | — | In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisionin… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-112362 | CRITICAL | 9.1 | @fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 … |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-10756 | NONE | — | TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restr… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-10752 | MEDIUM | 4.8 | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to authorization bypass in a… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-109995 | HIGH | 7.2 | The Advanced Views – Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable … |
T1078
T1548
|
|
2026-10-27 |