CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-110657 | LOW | 3.3 | Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulner… | — |
|
2026-10-14 |
| CVE-2026-110656 | LOW | 3.1 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml par… | — |
|
2026-10-14 |
| CVE-2026-110655 | LOW | 3.1 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml par… | — |
|
2026-10-14 |
| CVE-2026-60008 | LOW | 3.5 | Gitea's Jupyter notebook renderer inserts the notebook's language_info.name metadata into a CSS clas… | — |
|
2026-10-14 |
| CVE-2026-110624 | LOW | 3.1 | Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticat… | — |
|
2026-10-14 |
| CVE-2026-110606 | LOW | 3.3 | LibreCAD libdxfrw through LC2.2.0 (LibreCAD through 2.2.1.5) contains a stack-based out-of-bounds re… | — |
|
2026-10-14 |
| CVE-2026-110604 | LOW | 3.6 | Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when … | — |
|
2026-10-14 |
| CVE-2026-110592 | LOW | 3.5 | BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render_invoice_template() … | — |
|
2026-10-14 |
| CVE-2026-110262 | LOW | 3.3 | OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons Adv… | — |
|
2026-10-14 |
| CVE-2024-58392 | LOW | 3.3 | PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in __PHYSFS_utf8codepoint() tha… | — |
|
2026-10-14 |
| CVE-2026-88842 | LOW | 3.3 | A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor bet… | — |
|
2026-10-14 |
| CVE-2026-73792 | LOW | 3.8 | A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflo… | — |
|
2026-10-14 |
| CVE-2026-73791 | LOW | 2.0 | A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow. | — |
|
2026-10-14 |
| CVE-2026-108066 | LOW | 2.7 | The WP 2FA WordPress plugin before 4.2.0 does not perform an object-level capability check before r… | — |
|
2026-10-14 |
| CVE-2026-110458 | LOW | 3.7 | A malicious actor with access to the network and under certain conditions could exploit a Path Trave… | — |
|
2026-10-14 |
| CVE-2026-110457 | LOW | 3.7 | A malicious actor with access to the network and under certain conditions could exploit a Path Trave… | — |
|
2026-10-14 |
| CVE-2026-77205 | LOW | 3.7 | Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, bu… |
T1190
T1203
|
|
2026-10-13 |
| CVE-2026-110141 | LOW | 3.1 | Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to… | — |
|
2026-10-13 |
| CVE-2026-108388 | LOW | 3.5 | Indico is a feature-rich event management system. Indico 3.3.3 through 3.3.13 incorrectly uses the a… |
T1190
T1203
|
|
2026-10-13 |
| CVE-2026-110256 | LOW | 3.7 | Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function … | — |
|
2026-10-13 |