CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-114213 | NONE | — | Allocation of Resources Without Limits or Throttling vulnerability in the WebSocket fragment reassem… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-113440 | NONE | — | Insufficiently Protected Credentials vulnerability in hackney in benoitc hackney allows a redirectin… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-113436 | NONE | — | Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allo… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-112880 | NONE | — | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulner… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-111590 | NONE | — | A wide range of Harbor versions allow SSRF via its webhook delivery component which does not properl… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-111103 | NONE | — | Improper Cleanup on Thrown Exception vulnerability in the HTTP/2 handler of mtrudel bandit allows an… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-111101 | NONE | — | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/1.1 chunked body read… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-110499 | NONE | — | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of m… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-110475 | NONE | — | This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication a… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-110474 | NONE | — | This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded s… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-110314 | NONE | — | Client-Side Enforcement of Server-Side Security vulnerability in the WebSocket connection handling o… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-109584 | NONE | — | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in the HTTP/2 impleme… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-108529 | NONE | — | Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel bandit allo… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-108525 | NONE | — | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of m… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-107656 | CRITICAL | 9.8 | An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-107157 | NONE | — | Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds … |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-107092 | CRITICAL | 9.8 | NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint. |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-96432 | NONE | — | A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a completed… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-94380 | HIGH | 8.1 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS all… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116263 | MEDIUM | 4.6 | A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the functio… |
T1190
T1203
|
|
2026-10-26 |