CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-114555 | LOW | 3.5 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107311 | LOW | 3.7 | Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term all… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107309 | LOW | 3.7 | Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue a… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107308 | LOW | 3.1 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107306 | LOW | 3.8 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118475 | LOW | 3.6 | A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed co… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-112922 | LOW | 3.3 | A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a us… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119280 | LOW | 3.7 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118781 | LOW | 2.9 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript.… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118780 | LOW | 3.7 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript.… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118776 | LOW | 3.7 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript.… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118775 | LOW | 3.7 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript.… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118774 | LOW | 3.7 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript.… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119133 | LOW | 2.6 | Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw in VMCont… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119130 | LOW | 2.6 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set-pat… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119126 | LOW | 3.1 | Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles dot notation keys with null o… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119125 | LOW | 3.1 | Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 returns the stored value of a field reve… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119124 | LOW | 3.3 | ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where cr… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-119123 | LOW | 3.7 | ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-104312 | LOW | 3.5 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-gene… |
T1190
T1203
|
|
2026-10-29 |