CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-17488 | MEDIUM | 4.3 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrict… | — |
|
2026-10-16 |
| CVE-2026-17073 | MEDIUM | 5.4 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to mis… | — |
|
2026-10-16 |
| CVE-2026-17068 | MEDIUM | 5.4 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to … | — |
|
2026-10-16 |
| CVE-2026-111793 | MEDIUM | 4.3 | Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to re… | — |
|
2026-10-16 |
| CVE-2026-107674 | MEDIUM | 5.1 | IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DC… | — |
|
2026-10-16 |
| CVE-2026-89098 | MEDIUM | 5.5 | A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local dom… | — |
|
2026-10-16 |
| CVE-2026-80092 | MEDIUM | 5.3 | Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attac… |
T1078
T1548
|
|
2026-10-16 |
| CVE-2026-111721 | MEDIUM | 5.4 | Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated user… | — |
|
2026-10-16 |
| CVE-2026-111720 | MEDIUM | 5.3 | fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery v… |
T1078
T1548
|
|
2026-10-16 |
| CVE-2026-111719 | MEDIUM | 5.9 | Roncoo-pay through commit 9428382 contains a missing authorization vulnerability in F2FPayController… | — |
|
2026-10-16 |
| CVE-2026-111718 | MEDIUM | 6.5 | AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inj… | — |
|
2026-10-16 |
| CVE-2026-111717 | MEDIUM | 4.3 | Arkon through 0.9.2 contains a missing authorization vulnerability in list_skill_versions that allow… | — |
|
2026-10-16 |
| CVE-2026-111716 | MEDIUM | 5.4 | Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employe… | — |
|
2026-10-16 |
| CVE-2026-111715 | MEDIUM | 4.3 | Arkon through 0.9.2 contains a missing authorization vulnerability in GET /api/wiki/graph that lets … | — |
|
2026-10-16 |
| CVE-2026-111713 | MEDIUM | 5.4 | tarteaucitron.js before 1.37.0 contains a cross-site scripting vulnerability because getElemAttr res… | — |
|
2026-10-16 |
| CVE-2026-111712 | MEDIUM | 6.5 | Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unaut… | — |
|
2026-10-16 |
| CVE-2026-111709 | MEDIUM | 5.4 | WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerabilit… | — |
|
2026-10-16 |
| CVE-2026-111707 | MEDIUM | 5.3 | 99AI through 4.3.0 contains an insecure direct object reference vulnerability that allows unauthenti… | — |
|
2026-10-16 |
| CVE-2026-111705 | MEDIUM | 4.3 | Fuint through commit 57ec018 contains an insecure direct object reference vulnerability that allows … | — |
|
2026-10-16 |
| CVE-2026-111703 | MEDIUM | 6.3 | yshop-crm through 2.1.3 contains an insecure direct object reference vulnerability that allows authe… |
T1190
T1203
|
|
2026-10-16 |