CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-57200 | HIGH | 7.5 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1,… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-57195 | HIGH | 7.5 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1,… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116690 | HIGH | 7.5 | MLflow is an open source AI engineering platform for agents, large language models, and machine lear… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116688 | HIGH | 8.1 | CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-112355 | HIGH | 7.5 | The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vulnerabilit… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-112351 | HIGH | 8.8 | Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-112350 | HIGH | 7.5 | Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpo… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-115413 | HIGH | 7.8 | Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before vers… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-88812 | HIGH | 7.8 | A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-87086 | HIGH | 7.5 | Tanium addressed a denial of service vulnerability in Provision. |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-57202 | HIGH | 8.1 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1,… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-117516 | HIGH | 7.3 | A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unk… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-117515 | HIGH | 7.3 | A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-116682 | HIGH | 8.6 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116676 | HIGH | 8.8 | Atlantis is a self-hosted golang application that listens for Terraform pull request events via webh… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116662 | HIGH | 7.5 | Tanium addressed a compression bomb vulnerability in Enforce. |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116656 | HIGH | 7.5 | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116649 | HIGH | 7.1 | Tanium addressed an improper output sanitization vulnerability in Enforce. |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116647 | HIGH | 7.1 | Tanium addressed an improper output sanitization vulnerability in Comply. |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-108329 | HIGH | 8.8 | Tanium addressed an unauthorized code execution vulnerability in Threat Response. |
T1190
T1203
|
|
2026-10-27 |