CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-109461 | MEDIUM | 5.9 | Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorize… | — |
|
2026-10-16 |
| CVE-2026-102552 | MEDIUM | 5.9 | Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTO… | — |
|
2026-10-16 |
| CVE-2026-85985 | MEDIUM | 5.4 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1… | — |
|
2026-10-16 |
| CVE-2026-85745 | MEDIUM | 4.3 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1… | — |
|
2026-10-16 |
| CVE-2026-62362 | MEDIUM | 4.9 | PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customiza… | — |
|
2026-10-16 |
| CVE-2026-59967 | MEDIUM | 5.4 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.… | — |
|
2026-10-16 |
| CVE-2026-59962 | MEDIUM | 6.5 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.… | — |
|
2026-10-16 |
| CVE-2026-96425 | MEDIUM | 5.5 | Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as … | — |
|
2026-10-16 |
| CVE-2026-68908 | MEDIUM | 5.3 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS,… | — |
|
2026-10-16 |
| CVE-2026-57447 | MEDIUM | 4.3 | Discourse Doc Categories is a plugin for organizing Discourse topics as documentation. Prior to the … | — |
|
2026-10-16 |
| CVE-2026-57446 | MEDIUM | 5.3 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS,… | — |
|
2026-10-16 |
| CVE-2026-55862 | MEDIUM | 6.5 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multi… | — |
|
2026-10-16 |
| CVE-2026-55836 | MEDIUM | 6.8 | Open Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.13.0 unt… | — |
|
2026-10-16 |
| CVE-2026-54657 | MEDIUM | 6.5 | Open Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.0.0 unti… | — |
|
2026-10-16 |
| CVE-2026-102923 | MEDIUM | 5.4 | SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, … | — |
|
2026-10-16 |
| CVE-2026-111728 | MEDIUM | 5.4 | Seanime v3.7.0 to v3.10.3 contains an argument injection vulnerability reachable through improper au… | — |
|
2026-10-16 |
| CVE-2026-107777 | MEDIUM | 6.5 | Thermo Fisher Torrent Suite Software is vulnerable to a path traversal, which could allow an authent… | — |
|
2026-10-16 |
| CVE-2026-97858 | MEDIUM | 5.3 | An attacker can cause the server to unbind the target device from its current owner and rebind it to… | — |
|
2026-10-16 |
| CVE-2026-97470 | MEDIUM | 6.4 | The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerab… | — |
|
2026-10-16 |
| CVE-2026-90821 | MEDIUM | 5.4 | An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller a… | — |
|
2026-10-16 |