CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-108809 | LOW | 3.5 | A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects so… | — |
|
2026-10-12 |
| CVE-2026-108808 | LOW | 2.6 | A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability af… | — |
|
2026-10-12 |
| CVE-2026-108802 | LOW | 3.5 | A weakness has been identified in y_project RuoYi up to 4.8.3. This affects the function renderDrawe… | — |
|
2026-10-12 |
| CVE-2025-15703 | LOW | 3.5 | The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specificatio… | — |
|
2026-10-12 |
| CVE-2026-108981 | LOW | 3.6 | ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations wher… |
T1190
T1203
|
|
2026-10-12 |
| CVE-2026-18418 | LOW | 3.4 | The zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c logged the channe… | — |
|
2026-10-11 |
| CVE-2026-108857 | LOW | 3.3 | Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that… | — |
|
2026-10-11 |
| CVE-2026-108851 | LOW | 3.3 | phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faq_search … | — |
|
2026-10-11 |
| CVE-2026-108754 | LOW | 3.3 | GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys be… | — |
|
2026-10-11 |
| CVE-2026-108749 | LOW | 3.7 | docling-serve 1.14.0 through 1.36.0 contains a missing authentication vulnerability that allows unau… | — |
|
2026-10-11 |
| CVE-2026-108745 | LOW | 3.1 | CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultServlet tha… | — |
|
2026-10-11 |
| CVE-2026-108741 | LOW | 3.1 | Shepherd (shepherd-ai) through 0.3.1 contains a server-side request forgery guard bypass in the cita… | — |
|
2026-10-11 |
| CVE-2026-108736 | LOW | 3.7 | Speedtest Tracker through 1.15.0 contains an IP allowlist bypass vulnerability that allows unauthent… | — |
|
2026-10-11 |
| CVE-2026-108723 | LOW | 2.5 | answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block s… | — |
|
2026-10-11 |
| CVE-2026-108566 | LOW | 3.5 | A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function in… | — |
|
2026-10-11 |
| CVE-2026-107694 | LOW | 2.7 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 do… | — |
|
2026-10-11 |
| CVE-2026-107507 | LOW | 2.7 | The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport … | — |
|
2026-10-11 |
| CVE-2026-104684 | LOW | 2.7 | The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read… | — |
|
2026-10-11 |
| CVE-2026-104682 | LOW | 2.7 | The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gal… | — |
|
2026-10-11 |
| CVE-2026-104681 | LOW | 2.7 | The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to… | — |
|
2026-10-11 |