CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-110717 | MEDIUM | 5.3 | Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin … |
T1078
T1548
|
|
2026-10-14 |
| CVE-2026-110716 | MEDIUM | 5.5 | unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield_get_file_table()… |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-110715 | MEDIUM | 6.1 | MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototyp… |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-110714 | MEDIUM | 6.5 | libsmb2 through 6.2 contains an integer underflow vulnerability in decode_acl that allows malicious … |
T1190
T1059
+1
|
|
2026-10-14 |
| CVE-2026-110713 | MEDIUM | 6.5 | libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_fs_volume_i… | — |
|
2026-10-14 |
| CVE-2026-110712 | MEDIUM | 6.5 | libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_all_info th… | — |
|
2026-10-14 |
| CVE-2026-110659 | MEDIUM | 5.5 | ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor … | — |
|
2026-10-14 |
| CVE-2026-110658 | MEDIUM | 5.3 | Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse() … | — |
|
2026-10-14 |
| CVE-2026-110654 | MEDIUM | 6.1 | libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that al… |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-109438 | MEDIUM | 5.3 | 3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory dis… |
T1078
T1548
|
|
2026-10-14 |
| CVE-2026-100404 | MEDIUM | 6.5 | Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, guest users … | — |
|
2026-10-14 |
| CVE-2026-100394 | MEDIUM | 6.5 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From… | — |
|
2026-10-14 |
| CVE-2026-97629 | MEDIUM | 6.5 | Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:… | — |
|
2026-10-14 |
| CVE-2026-96615 | MEDIUM | 6.5 | Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Res… | — |
|
2026-10-14 |
| CVE-2026-95101 | MEDIUM | 5.3 | Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. … | — |
|
2026-10-14 |
| CVE-2026-73273 | MEDIUM | 4.3 | Gitea's Maven upload handler reads checksum uploads entirely into memory and returns before enforcin… | — |
|
2026-10-14 |
| CVE-2026-73135 | MEDIUM | 5.3 | Gitea uses inconsistent repository visibility predicates, and the condition used by some repository-… | — |
|
2026-10-14 |
| CVE-2026-73130 | MEDIUM | 4.3 | Gitea does not limit the length of the gitignores field accepted by repository-creation forms and th… | — |
|
2026-10-14 |
| CVE-2026-73126 | MEDIUM | 4.3 | Gitea's Actions workflow status badge endpoint does not enforce repository-read scope or the public-… | — |
|
2026-10-14 |
| CVE-2026-71301 | MEDIUM | 4.3 | Gitea's repository markup endpoint resolves same-repository pull request references without enforcin… |
T1190
T1203
|
|
2026-10-14 |