CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115972 | MEDIUM | 5.3 | A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerabil… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115971 | MEDIUM | 5.3 | A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the f… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115970 | HIGH | 7.3 | A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the fi… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115969 | HIGH | 7.3 | A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/a… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115933 | CRITICAL | 9.9 | Postiz signs its session, invitation and password reset tokens with one shared secret and without an… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115557 | NONE | — | Python has added a denylist for known compromised certificates to the "ssl" module to ensure user sa… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114704 | HIGH | 7.2 | Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi allow… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114629 | NONE | — | Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for … |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114192 | MEDIUM | 6.5 | Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting I… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114191 | HIGH | 7.5 | Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-c… |
T1190
T1059
+1
|
|
2026-10-24 |
| CVE-2026-115932 | CRITICAL | 9.6 | When a post is published, Postiz treats a media path that is not a web address as a file on the serv… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116020 | MEDIUM | 5.4 | BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController t… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116019 | HIGH | 8.8 | Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to inv… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116018 | MEDIUM | 4.3 | ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116017 | MEDIUM | 4.3 | Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the … |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116016 | HIGH | 7.1 | yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116015 | MEDIUM | 4.3 | yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall t… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116014 | HIGH | 8.1 | open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() … |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116013 | LOW | 3.7 | OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_sec… |
T1190
T1059
+1
|
|
2026-10-24 |
| CVE-2026-116012 | LOW | 3.6 | Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and sk… |
T1190
T1203
|
|
2026-10-24 |