CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118778 | MEDIUM | 5.9 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript.… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118777 | MEDIUM | 4.8 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript.… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118767 | MEDIUM | 4.8 | Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Pyt… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118766 | MEDIUM | 6.1 | Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HT… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-102260 | MEDIUM | 4.3 | HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in sev… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118760 | MEDIUM | 6.5 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2025-12523 | MEDIUM | 6.5 | Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to a… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-90991 | MEDIUM | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-90872 | MEDIUM | 6.6 | Improper neutralization of directives in dynamically evaluated code in the Manager web console of Pr… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-90871 | MEDIUM | 5.3 | Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versi… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-90870 | MEDIUM | 5.3 | A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-90862 | MEDIUM | 4.3 | Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-90861 | MEDIUM | 6.6 | Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-88090 | MEDIUM | 5.4 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-88078 | MEDIUM | 4.3 | Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauth… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-85330 | MEDIUM | 4.3 | Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a se… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-84296 | MEDIUM | 6.8 | Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-77819 | MEDIUM | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbit… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-77817 | MEDIUM | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitiv… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-54865 | MEDIUM | 6.5 | Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions. |
T1190
T1203
|
|
2026-10-29 |