CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116189 | HIGH | 7.5 | rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116188 | MEDIUM | 5.3 | rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116187 | MEDIUM | 5.0 | Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116186 | NONE | — | OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-descendant auth… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116185 | MEDIUM | 5.0 | OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticat… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116184 | NONE | — | OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins to … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116183 | HIGH | 7.5 | phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unaut… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116182 | MEDIUM | 5.0 | phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export featur… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116181 | MEDIUM | 6.5 | vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remot… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116180 | HIGH | 7.7 | vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/o… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116179 | HIGH | 7.5 | vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients … |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116178 | MEDIUM | 5.9 | vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attacke… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116177 | HIGH | 7.5 | vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allo… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116176 | HIGH | 8.2 | vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API c… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116175 | MEDIUM | 6.5 | vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116174 | MEDIUM | 5.9 | vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116173 | MEDIUM | 5.9 | vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attacke… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116172 | MEDIUM | 5.9 | vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116171 | HIGH | 7.5 | SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath be… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116170 | MEDIUM | 4.9 | SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read… |
T1190
T1005
+1
|
|
2026-10-25 |