CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-110595 | MEDIUM | 4.3 | BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_uplo… | — |
|
2026-10-14 |
| CVE-2026-110594 | MEDIUM | 4.9 | BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that all… | — |
|
2026-10-14 |
| CVE-2026-110593 | MEDIUM | 5.4 | BottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email C… | — |
|
2026-10-14 |
| CVE-2026-110591 | MEDIUM | 5.5 | OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analy… | — |
|
2026-10-14 |
| CVE-2026-110270 | MEDIUM | 5.5 | OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons … | — |
|
2026-10-14 |
| CVE-2026-110263 | MEDIUM | 5.5 | OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseTyp… | — |
|
2026-10-14 |
| CVE-2026-110261 | MEDIUM | 5.5 | OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust … | — |
|
2026-10-14 |
| CVE-2026-110260 | MEDIUM | 5.5 | OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.compute… | — |
|
2026-10-14 |
| CVE-2026-110259 | MEDIUM | 5.5 | OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmIn… | — |
|
2026-10-14 |
| CVE-2026-110258 | MEDIUM | 5.5 | OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutine… | — |
|
2026-10-14 |
| CVE-2026-110257 | MEDIUM | 5.5 | OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBoo… | — |
|
2026-10-14 |
| CVE-2026-107381 | MEDIUM | 6.5 | svg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, Resolver::processReferences() in src/Eleme… | — |
|
2026-10-14 |
| CVE-2026-101025 | MEDIUM | 5.3 | Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxm… | — |
|
2026-10-14 |
| CVE-2026-101019 | MEDIUM | 6.5 | Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backe… | — |
|
2026-10-14 |
| CVE-2016-20099 | MEDIUM | 5.5 | L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/v… | — |
|
2026-10-14 |
| CVE-2026-94348 | MEDIUM | 6.1 | Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Spec… | — |
|
2026-10-14 |
| CVE-2026-35161 | MEDIUM | 5.3 | Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lock… | — |
|
2026-10-14 |
| CVE-2026-110652 | MEDIUM | 4.0 | ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated server-side request forgery vuln… |
T1078
T1548
|
|
2026-10-14 |
| CVE-2026-104086 | MEDIUM | 5.5 | 7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 arch… | — |
|
2026-10-14 |
| CVE-2026-101217 | MEDIUM | 6.5 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathnam… | — |
|
2026-10-14 |