CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111376 | MEDIUM | 5.0 | FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows cl… | — |
|
2026-10-16 |
| CVE-2026-111375 | MEDIUM | 4.8 | FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL cl… | — |
|
2026-10-16 |
| CVE-2026-111374 | MEDIUM | 5.3 | FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client… | — |
|
2026-10-16 |
| CVE-2026-111373 | MEDIUM | 5.3 | FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport t… | — |
|
2026-10-16 |
| CVE-2026-111237 | MEDIUM | 5.3 | A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52… | — |
|
2026-10-16 |
| CVE-2026-111212 | MEDIUM | 4.8 | A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by… | — |
|
2026-10-16 |
| CVE-2026-100159 | MEDIUM | 4.8 | The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 … | — |
|
2026-10-16 |
| CVE-2026-92777 | MEDIUM | 6.4 | A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical … | — |
|
2026-10-16 |
| CVE-2026-89062 | MEDIUM | 5.5 | A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver th… | — |
|
2026-10-16 |
| CVE-2026-89057 | MEDIUM | 6.8 | A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow… | — |
|
2026-10-16 |
| CVE-2026-16755 | MEDIUM | 5.3 | A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Ch… | — |
|
2026-10-16 |
| CVE-2026-16754 | MEDIUM | 4.8 | A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, d… | — |
|
2026-10-16 |
| CVE-2026-96806 | MEDIUM | 5.8 | The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked… | — |
|
2026-10-15 |
| CVE-2026-94135 | MEDIUM | 4.3 | The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClien… | — |
|
2026-10-15 |
| CVE-2026-92228 | MEDIUM | 6.5 | The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted … | — |
|
2026-10-15 |
| CVE-2026-111368 | MEDIUM | 6.4 | ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API… | — |
|
2026-10-15 |
| CVE-2026-111367 | MEDIUM | 6.5 | BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenti… | — |
|
2026-10-15 |
| CVE-2026-111365 | MEDIUM | 6.0 | cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-super… | — |
|
2026-10-15 |
| CVE-2026-111364 | MEDIUM | 6.5 | MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentCont… | — |
|
2026-10-15 |
| CVE-2026-111363 | MEDIUM | 6.5 | BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows a… | — |
|
2026-10-15 |