CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-110626 | MEDIUM | 6.1 | ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_ar… | — |
|
2026-10-14 |
| CVE-2026-110625 | MEDIUM | 6.1 | ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_ar… | — |
|
2026-10-14 |
| CVE-2026-110620 | MEDIUM | 6.8 | Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetS… | — |
|
2026-10-14 |
| CVE-2026-110619 | MEDIUM | 4.8 | frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticate… | — |
|
2026-10-14 |
| CVE-2026-110617 | MEDIUM | 4.8 | we-mp-rss through 1.5.3 contains a missing authorization vulnerability in the /api/v1/wx/tools/expor… | — |
|
2026-10-14 |
| CVE-2026-110614 | MEDIUM | 6.5 | Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support … | — |
|
2026-10-14 |
| CVE-2026-110613 | MEDIUM | 6.5 | youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authen… | — |
|
2026-10-14 |
| CVE-2026-110611 | MEDIUM | 5.9 | REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 end… | — |
|
2026-10-14 |
| CVE-2026-110610 | MEDIUM | 5.4 | ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-modu… | — |
|
2026-10-14 |
| CVE-2026-110609 | MEDIUM | 6.5 | Dromara Skyeye through commit 65d3ddcede70 contains an sql injection vulnerability that allows authe… | — |
|
2026-10-14 |
| CVE-2026-110608 | MEDIUM | 5.4 | BizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference vulnerabilit… | — |
|
2026-10-14 |
| CVE-2026-110607 | MEDIUM | 6.5 | BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that… | — |
|
2026-10-14 |
| CVE-2026-110605 | MEDIUM | 5.5 | libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash app… | — |
|
2026-10-14 |
| CVE-2026-110603 | MEDIUM | 6.3 | LASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows atta… | — |
|
2026-10-14 |
| CVE-2026-110602 | MEDIUM | 6.3 | libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in … | — |
|
2026-10-14 |
| CVE-2026-110601 | MEDIUM | 6.3 | libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out-of-bounds write vulnerability … | — |
|
2026-10-14 |
| CVE-2026-110600 | MEDIUM | 5.5 | xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_… | — |
|
2026-10-14 |
| CVE-2026-110598 | MEDIUM | 6.1 | Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value(… | — |
|
2026-10-14 |
| CVE-2026-110597 | MEDIUM | 6.1 | Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFro… | — |
|
2026-10-14 |
| CVE-2026-110596 | MEDIUM | 5.5 | quirc through 1.2 contains an excessive-iteration vulnerability in find_alignment_pattern() in lib/i… | — |
|
2026-10-14 |