CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111129 | MEDIUM | 5.5 | Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability i… | — |
|
2026-10-15 |
| CVE-2026-111128 | MEDIUM | 5.5 | Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that a… | — |
|
2026-10-15 |
| CVE-2026-111127 | MEDIUM | 6.1 | catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xls… | — |
|
2026-10-15 |
| CVE-2026-111126 | MEDIUM | 6.1 | catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of proc… | — |
|
2026-10-15 |
| CVE-2026-111125 | MEDIUM | 6.1 | CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile d… | — |
|
2026-10-15 |
| CVE-2026-111124 | MEDIUM | 6.1 | CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unq… | — |
|
2026-10-15 |
| CVE-2026-111123 | MEDIUM | 6.1 | FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corr… | — |
|
2026-10-15 |
| CVE-2026-110878 | MEDIUM | 5.4 | Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability that allows authentica… | — |
|
2026-10-15 |
| CVE-2026-110877 | MEDIUM | 5.5 | AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in CdmoLoader::load() in src/dmo… | — |
|
2026-10-15 |
| CVE-2026-110876 | MEDIUM | 5.5 | AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers… | — |
|
2026-10-15 |
| CVE-2026-110875 | MEDIUM | 6.1 | AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp that… | — |
|
2026-10-15 |
| CVE-2026-110874 | MEDIUM | 6.6 | Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize() in funct… | — |
|
2026-10-15 |
| CVE-2026-110378 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP E-Signature Ninja Forms Signature Contract Add-On ninja-si… | — |
|
2026-10-15 |
| CVE-2026-110375 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-15 |
| CVE-2026-110374 | MEDIUM | 4.3 | Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number … | — |
|
2026-10-15 |
| CVE-2026-110364 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for … | — |
|
2026-10-15 |
| CVE-2026-110362 | MEDIUM | 5.3 | Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payme… | — |
|
2026-10-15 |
| CVE-2026-110361 | MEDIUM | 6.5 | Insertion of Sensitive Information Into Sent Data vulnerability in ClikIT Infinite Uploads infinite-… | — |
|
2026-10-15 |
| CVE-2026-110360 | MEDIUM | 5.3 | Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting … | — |
|
2026-10-15 |
| CVE-2026-109932 | MEDIUM | 5.9 | undici is an HTTP client library for Node.js. In versions 5.15.0 through 6.29.0, 7.0.0 through 7.30.… | — |
|
2026-10-15 |