CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115567 | NONE | — | Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::ti… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-110975 | HIGH | 7.4 | A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the end… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-87901 | HIGH | 8.3 | Improper sanitization in the registration module allows reflected Cross-Site Scripting. |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115810 | HIGH | 7.7 | Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle impo… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-106074 | MEDIUM | 4.8 | A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-106073 | LOW | 3.3 | A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the req… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-106072 | MEDIUM | 6.7 | A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-106071 | LOW | 3.6 | A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not matc… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-106070 | LOW | 3.7 | A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requ… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-106069 | HIGH | 7.4 | A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-105483 | HIGH | 7.4 | A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN t… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-105482 | HIGH | 7.4 | A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by … |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-105481 | MEDIUM | 6.5 | A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that … |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-57845 | HIGH | 8.8 | Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows a… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-52356 | NONE | — | An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L … |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-50787 | NONE | — | e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerabili… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2025-45528 | NONE | — | An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute ar… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-58497 | NONE | — | Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, … |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-55486 | CRITICAL | 9.3 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-55465 | MEDIUM | 5.3 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse… |
T1190
T1059
+1
|
|
2026-10-23 |