CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118266 | MEDIUM | 5.3 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's MethodOverride middleware accepts a sa… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-115415 | MEDIUM | 6.5 | Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents To… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118687 | MEDIUM | 6.5 | Coder before 2.29.21, 2.30.0 before 2.34.12, 2.35.0 before 2.35.9, 2.36.0 before 2.36.7, and 2.37.0 … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118685 | MEDIUM | 6.5 | ToolJet from 3.20.2-lts before 3.20.242-lts contains an authorization bypass in SignupDisableGuard, … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118684 | MEDIUM | 5.9 | MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() tha… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118680 | MEDIUM | 4.4 | SiYuan 3.8.7 through 3.8.8 fails to normalize Windows GLOBALROOT device-namespace aliases, bypassing… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118677 | MEDIUM | 5.9 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Loca… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118646 | MEDIUM | 6.5 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerabilit… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118640 | MEDIUM | 5.4 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub t… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118265 | MEDIUM | 5.3 | Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's ExtractIPFromRealIPHeader validates wh… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118259 | MEDIUM | 5.3 | opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and … |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-106484 | MEDIUM | 4.4 | Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allo… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-79656 | MEDIUM | 6.0 | A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-58458 | MEDIUM | 6.5 | Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnera… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-110183 | MEDIUM | 4.3 | PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence.… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-110182 | MEDIUM | 4.3 | PostgreSQL Anonymizer contains a vulnerability related to the anon.partial() and anon.partial_email(… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-110181 | MEDIUM | 6.5 | PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-105620 | MEDIUM | 6.5 | PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a rule. The problem is resolved i… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-105619 | MEDIUM | 4.8 | PostgreSQL Anonymizer doesn't mask data accessed thru a security_invoker view. The problem is resolv… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-105618 | MEDIUM | 5.7 | PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inheritance tables… |
T1190
T1203
|
|
2026-10-28 |