CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115915 | HIGH | 8.1 | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO pas… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115914 | MEDIUM | 6.5 | vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the Dee… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115804 | MEDIUM | 6.4 | HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check reg… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-112839 | MEDIUM | 4.3 | Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coup… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-111404 | LOW | 3.7 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerab… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-10757 | CRITICAL | 9.8 | There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows an… |
T1190
T1005
+1
|
|
2026-10-26 |
| CVE-2026-105765 | HIGH | 7.5 | HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass … |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-105626 | HIGH | 7.5 | HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that ma… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-105608 | HIGH | 8.8 | HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh pro… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-102649 | CRITICAL | 9.9 | Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator. Prior to 0.13.… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-82390 | LOW | 3.7 | The Espressif AES driver drivers/crypto/crypto_esp32_aes.c advertises a multi-session cipher API — i… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-82389 | MEDIUM | 6.5 | In the Bluetooth Classic Hands-Free Profile Audio Gateway role, hfp_ag_create() in subsys/bluetooth/… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-82388 | MEDIUM | 5.3 | bt_hfp_hf_connect() in subsys/bluetooth/host/classic/hfp_hf.c allocates the per-connection HFP Hands… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-81039 | MEDIUM | 4.3 | The Bluetooth host pre-allocates a bt_conn object (a "reservation") from the fixed acl_conns[] pool … |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-81038 | HIGH | 7.1 | The Object Transfer Service server builds its Object Action Control Point (OACP) response indication… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-71456 | NONE | — | Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Paddi… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-71455 | NONE | — | Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entra… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-19742 | LOW | 3.7 | The IPv6 stack derived the long-lived secret key used to compute RFC 7217 stable interface identifie… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-116612 | HIGH | 7.8 | A flaw was found in GStreamer Editing Services (gst-editing-services). A GES project file can embed … |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116596 | NONE | — | Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authori… |
T1068
T1134
|
|
2026-10-26 |