CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-65220 | HIGH | 8.8 | A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ me… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-65219 | HIGH | 7.4 | A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a special… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-65210 | MEDIUM | 4.9 | This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesy… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-18451 | LOW | 3.1 | The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses i… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-18450 | CRITICAL | 9.8 | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attac… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-18449 | HIGH | 7.5 | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attac… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-16521 | HIGH | 7.2 | An OS command injection vulnerability exists because of insufficient input filtering. An attacker ca… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-111461 | NONE | — | An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management fu… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-111460 | NONE | — | A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain c… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-111459 | NONE | — | An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). U… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-10511 | MEDIUM | 6.4 | The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forget… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-107472 | NONE | — | An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-101034 | NONE | — | An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-75891 | HIGH | 8.8 | The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all… |
T1068
T1134
|
|
2026-10-27 |
| CVE-2026-110910 | LOW | 3.7 | ### Summary `qs.stringify` with `allowEmptyArrays: true` writes the key of an empty array without… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-106174 | HIGH | 7.5 | A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-105946 | NONE | — | Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-103359 | MEDIUM | 5.3 | The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not verify the authenti… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-103325 | LOW | 3.7 | The TiendaCrypto para WooCommerce WordPress plugin through 1.2.1 does not correctly verify the authe… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-117472 | MEDIUM | 4.3 | Psono Server CE && EE versions 4.0.33 through 7.2.3 compared the request path for the bulk-secret-re… |
T1190
T1203
|
|
2026-10-27 |