CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-110648 | HIGH | 7.8 | @offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows at… |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-110647 | HIGH | 7.8 | Turnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to exec… | — |
|
2026-10-14 |
| CVE-2026-110646 | HIGH | 8.1 | Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows… |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-110642 | HIGH | 7.8 | xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that al… | — |
|
2026-10-14 |
| CVE-2026-110641 | HIGH | 8.8 | @runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allo… | — |
|
2026-10-14 |
| CVE-2026-110637 | HIGH | 7.8 | buildebooks before 0.2.2 contains an OS command injection vulnerability in lib/kindle.js that allows… | — |
|
2026-10-14 |
| CVE-2026-110633 | HIGH | 7.8 | MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-p… | — |
|
2026-10-14 |
| CVE-2026-110632 | HIGH | 8.1 | Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 t… | — |
|
2026-10-14 |
| CVE-2026-110628 | HIGH | 8.6 | Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the… | — |
|
2026-10-14 |
| CVE-2026-110623 | HIGH | 7.5 | Papermerge Core through 3.5.3 contains a missing authorization vulnerability in the shared nodes API… | — |
|
2026-10-14 |
| CVE-2026-110622 | HIGH | 7.5 | Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticat… | — |
|
2026-10-14 |
| CVE-2026-110621 | HIGH | 8.8 | Swetrix Cloud before 5.1.0 contains a missing authorization vulnerability in ProjectController.addPr… | — |
|
2026-10-14 |
| CVE-2026-110618 | HIGH | 8.1 | SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP ser… | — |
|
2026-10-14 |
| CVE-2026-110616 | HIGH | 8.1 | NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticate… | — |
|
2026-10-14 |
| CVE-2026-110615 | HIGH | 7.1 | jshERP through 3.6 contains a missing authorization vulnerability in the POST /user/batchSetStatus e… | — |
|
2026-10-14 |
| CVE-2026-110599 | HIGH | 7.1 | L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_s… | — |
|
2026-10-14 |
| CVE-2026-104939 | HIGH | 7.5 | Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy fo… | — |
|
2026-10-14 |
| CVE-2025-71433 | HIGH | 7.5 | Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to… | — |
|
2026-10-14 |
| CVE-2020-37281 | HIGH | 8.1 | Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows … | — |
|
2026-10-14 |
| CVE-2017-20286 | HIGH | 7.8 | DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette() in il_gif.cpp that allows… | — |
|
2026-10-14 |