CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-94621 | MEDIUM | 6.3 | AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.30.3, the Al… | — |
|
2026-10-15 |
| CVE-2026-92707 | MEDIUM | 5.3 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing att… | — |
|
2026-10-15 |
| CVE-2026-87029 | MEDIUM | 5.9 | undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.… | — |
|
2026-10-15 |
| CVE-2026-62322 | MEDIUM | 6.5 | Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backe… | — |
|
2026-10-15 |
| CVE-2026-57183 | MEDIUM | 6.1 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth() in src/m… | — |
|
2026-10-15 |
| CVE-2026-55871 | MEDIUM | 6.5 | GYM One is open-source gym management software for fitness centers, personal trainers, and sports cl… | — |
|
2026-10-15 |
| CVE-2026-55842 | MEDIUM | 5.4 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the apiCorsConfiguratio… | — |
|
2026-10-15 |
| CVE-2026-55840 | MEDIUM | 5.4 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() meth… | — |
|
2026-10-15 |
| CVE-2026-111252 | MEDIUM | 6.5 | A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian… | — |
|
2026-10-15 |
| CVE-2026-111234 | MEDIUM | 5.9 | SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers … | — |
|
2026-10-15 |
| CVE-2026-111233 | MEDIUM | 4.7 | Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in fi… | — |
|
2026-10-15 |
| CVE-2026-111232 | MEDIUM | 4.8 | Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that all… | — |
|
2026-10-15 |
| CVE-2026-111230 | MEDIUM | 4.9 | Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the… | — |
|
2026-10-15 |
| CVE-2026-111228 | MEDIUM | 5.5 | Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbo… | — |
|
2026-10-15 |
| CVE-2026-111227 | MEDIUM | 5.5 | Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.ph… | — |
|
2026-10-15 |
| CVE-2026-111225 | MEDIUM | 5.0 | Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.lea… | — |
|
2026-10-15 |
| CVE-2026-111222 | MEDIUM | 6.6 | Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticate… | — |
|
2026-10-15 |
| CVE-2026-111221 | MEDIUM | 6.6 | Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authen… | — |
|
2026-10-15 |
| CVE-2026-111219 | MEDIUM | 6.6 | Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.p… | — |
|
2026-10-15 |
| CVE-2026-111172 | MEDIUM | 5.3 | @casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields() tha… | — |
|
2026-10-15 |