CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-50543 | MEDIUM | 4.3 | Xibo is an open source digital signage platform with a web content management system and Windows dis… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-50542 | MEDIUM | 5.4 | Xibo is an open source digital signage platform with a web content management system and Windows dis… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-50539 | MEDIUM | 6.5 | Xibo is an open source digital signage platform with a web content management system and Windows dis… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118029 | MEDIUM | 5.9 | Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-112356 | MEDIUM | 6.1 | GFI KerioConnect (Kerio Connect) before 10.0.9 Patch 2 contains a cross-site scripting vulnerability… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-50541 | MEDIUM | 6.5 | Xibo is an open source digital signage platform with a web content management system and Windows dis… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-93516 | MEDIUM | 5.5 | A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-67080 | MEDIUM | 6.5 | HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of er… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-67079 | MEDIUM | 6.4 | HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed t… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-67077 | MEDIUM | 4.2 | HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an atta… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-55369 | MEDIUM | 6.5 | Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /a… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-116404 | MEDIUM | 6.5 | Missing Authorization vulnerability in David Anderson Redux Framework redux-framework allows Lifting… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-115957 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-81472 | MEDIUM | 4.2 | Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDR… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116855 | MEDIUM | 5.4 | Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-87880 | MEDIUM | 6.8 | Sensitive information disclosure due to missing SSL certificate verification affecting one component… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-87879 | MEDIUM | 5.9 | Sensitive information disclosure due to improper token validation. The following products are affect… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-87878 | MEDIUM | 6.3 | Linux binaries have executable stack attribute enabled. The following products are affected: Acronis… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-87101 | MEDIUM | 6.2 | Sensitive information disclosure due to improper token validation. The following products are affect… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-87099 | MEDIUM | 5.7 | Cross-site scripting (XSS) vulnerability due to improper input validation. The following products ar… |
T1190
T1203
|
|
2026-10-28 |