CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-65628 | NONE | — | jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secr… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-65627 | NONE | — | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-65626 | NONE | — | The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbacher padding… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-65625 | NONE | — | The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag b… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-57196 | NONE | — | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1,… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-57193 | NONE | — | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1,… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-57187 | NONE | — | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1,… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-57184 | NONE | — | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1,… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-116482 | LOW | 3.5 | A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a144… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116479 | MEDIUM | 4.3 | A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116478 | MEDIUM | 5.3 | A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecu… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116477 | MEDIUM | 4.3 | A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impact… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115927 | MEDIUM | 5.3 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tornado decod… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-115924 | HIGH | 8.6 | Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-115533 | NONE | — | The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-104598 | NONE | — | libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-104597 | NONE | — | libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuu… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-104596 | NONE | — | libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service compo… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2014-125135 | HIGH | 7.3 | A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116638 | NONE | — | The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmwa… |
T1190
T1059
+1
|
|
2026-10-26 |