CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-93851 | HIGH | 8.0 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to validate the targe… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-61572 | HIGH | 8.6 | AVideo is a video-sharing Platform. Before the initial remediation attempt in 8.1.0, `url_get_conten… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-61571 | HIGH | 7.3 | AVideo is a video-sharing Platform. Prior to 8.1.0, the encoder lacks a global authentication layer … |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-61569 | HIGH | 7.5 | AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated streamer login at `objects/l… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-54455 | HIGH | 7.6 | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and h… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-54453 | HIGH | 7.2 | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and h… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118804 | HIGH | 7.5 | Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthent… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118803 | HIGH | 7.5 | Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability t… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118755 | HIGH | 7.2 | Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118753 | HIGH | 7.8 | FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.c… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118752 | HIGH | 7.8 | FreeImage (danoli3 fork) before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118694 | HIGH | 7.5 | python-markdown2 through 2.5.5 contains a denial of service vulnerability that allows remote users t… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118692 | HIGH | 7.0 | CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::link_clicked t… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118689 | HIGH | 7.5 | OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader()… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118682 | HIGH | 7.5 | KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118660 | HIGH | 8.6 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prio… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118659 | HIGH | 7.5 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prio… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-78674 | HIGH | 8.8 | The BPMN System REST APIs do not sufficiently validate input parameters, allowing authenticated user… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-76418 | HIGH | 8.6 | A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appl… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-6647 | HIGH | 7.4 | In deployments of WSO2 Identity Server configured with a case-insensitive user store and a case-sens… |
T1190
T1203
|
|
2026-10-28 |