CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-59179 | HIGH | 8.3 | OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, `@openhop/server` pas… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-59177 | HIGH | 8.8 | ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to 1… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-59176 | HIGH | 7.8 | Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the `set_functy… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-59172 | HIGH | 7.8 | Joker is a small Clojure interpreter, linter and formatter written in Go. Prior to 1.8.2, `joker --l… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-59164 | HIGH | 7.1 | NORA is a self-hosted artifact registry and pull-through cache. Prior to 0.9.5, `nora-registry` auth… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-52729 | HIGH | 7.1 | Xibo is an open source digital signage platform with a web content management system and Windows dis… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-116390 | HIGH | 7.2 | Deserialization of Untrusted Data vulnerability in stepasyuk Filter Everything — WordPress &… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-116389 | HIGH | 8.8 | Deserialization of Untrusted Data vulnerability in crossi72 Phoenix Media Rename phoenix-media-renam… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-115603 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-115590 | HIGH | 7.2 | Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.T… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-67073 | HIGH | 8.6 | HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability.… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118040 | HIGH | 7.5 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verificat… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118039 | HIGH | 7.5 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external en… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118038 | HIGH | 7.1 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal v… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118037 | HIGH | 7.5 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recur… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118036 | HIGH | 7.5 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recur… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118035 | HIGH | 7.5 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recur… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-116393 | HIGH | 7.5 | Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploi… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116392 | HIGH | 7.2 | Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object In… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116391 | HIGH | 8.8 | Deserialization of Untrusted Data vulnerability in GS Plugins GS Logo Slider gs-logo-slider allows O… |
T1190
T1203
|
|
2026-10-28 |