CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-48356 | HIGH | — | Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability … |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-76654 | MEDIUM | 5.8 | An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMo… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-2270 | MEDIUM | 5.9 | A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scop… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116602 | MEDIUM | 6.5 | A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects t… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-116556 | LOW | 2.4 | A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argil… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116555 | LOW | 2.4 | A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function o… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116554 | LOW | 3.5 | A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-77924 | NONE | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-66045 | NONE | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-66044 | NONE | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-66043 | NONE | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-66042 | NONE | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-65686 | NONE | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-65685 | NONE | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116748 | HIGH | 8.8 | Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116747 | HIGH | 8.1 | Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticate… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-116746 | MEDIUM | 5.3 | QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview mod… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-116745 | MEDIUM | 6.5 | QloApps through 1.7.0 contains an information disclosure vulnerability in OrderConfirmationControlle… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-116744 | MEDIUM | 5.3 | ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() … |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116743 | MEDIUM | 5.5 | libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_… |
T1190
T1203
|
|
2026-10-26 |