CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119602 | LOW | 3.7 | libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119601 | MEDIUM | 6.1 | AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119600 | MEDIUM | 4.8 | tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attac… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119599 | MEDIUM | 4.3 | AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users… |
T1068
T1134
|
|
2026-10-30 |
| CVE-2026-119598 | MEDIUM | 4.3 | Miaomiaowu before 0.9.3 contains an insecure direct object reference vulnerability in /api/user/prox… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119597 | CRITICAL | 9.8 | OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthent… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119596 | MEDIUM | 4.3 | UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show t… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119578 | HIGH | 7.8 | MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119577 | MEDIUM | 6.8 | ArcadeDB before 26.10.2 contains an improper authorization vulnerability that allows revoked users t… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119576 | MEDIUM | 4.3 | ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that allows user… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119575 | MEDIUM | 6.5 | ArcadeDB from 26.8.1 before 26.10.2 contains a server-side request forgery vulnerability that allows… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119574 | MEDIUM | 5.9 | Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unau… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119573 | MEDIUM | 4.4 | Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provid… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119572 | HIGH | 8.7 | Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kuberne… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119571 | LOW | 3.7 | Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installa… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119570 | LOW | 3.1 | Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119569 | MEDIUM | 5.3 | Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerabi… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119542 | MEDIUM | 4.3 | A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested predicate… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119528 | HIGH | 7.8 | A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destinati… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118987 | NONE | — | CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-… |
T1190
T1203
|
|
2026-10-30 |