CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-110775 | MEDIUM | 6.5 | Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that allows… | — |
|
2026-10-14 |
| CVE-2026-110774 | MEDIUM | 5.3 | Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allo… | — |
|
2026-10-14 |
| CVE-2026-110773 | MEDIUM | 4.3 | GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler th… | — |
|
2026-10-14 |
| CVE-2026-110772 | MEDIUM | 4.3 | Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::Bul… | — |
|
2026-10-14 |
| CVE-2026-110771 | MEDIUM | 4.3 | Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated cust… | — |
|
2026-10-14 |
| CVE-2026-110768 | MEDIUM | 4.8 | holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Tele… | — |
|
2026-10-14 |
| CVE-2026-110766 | MEDIUM | 4.3 | Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated user… | — |
|
2026-10-14 |
| CVE-2026-110765 | MEDIUM | 5.9 | FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook … | — |
|
2026-10-14 |
| CVE-2026-110764 | MEDIUM | 5.3 | AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-s… | — |
|
2026-10-14 |
| CVE-2026-110763 | MEDIUM | 4.3 | lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference vulnerabi… | — |
|
2026-10-14 |
| CVE-2026-110666 | MEDIUM | 6.5 | A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the fi… | — |
|
2026-10-14 |
| CVE-2026-110248 | MEDIUM | 5.3 | Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMake… | — |
|
2026-10-14 |
| CVE-2026-103974 | MEDIUM | 5.4 | lichess.org is the forever free, adless and open source chess server. Prior to commit c54596c9e1569d… | — |
|
2026-10-14 |
| CVE-2026-102682 | MEDIUM | 5.6 | Pipecat is an open-source Python framework for building real-time voice and multimodal conversationa… | — |
|
2026-10-14 |
| CVE-2026-102354 | MEDIUM | 6.8 | BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloud… | — |
|
2026-10-14 |
| CVE-2026-92160 | MEDIUM | 6.5 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde… | — |
|
2026-10-14 |
| CVE-2026-92159 | MEDIUM | 6.5 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde… | — |
|
2026-10-14 |
| CVE-2026-92157 | MEDIUM | 6.5 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde… | — |
|
2026-10-14 |
| CVE-2026-92156 | MEDIUM | 6.5 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde… | — |
|
2026-10-14 |
| CVE-2026-86856 | MEDIUM | 6.5 | A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair c… | — |
|
2026-10-14 |