CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-108603 | LOW | 3.3 | slide-maker through 5.8.0 contains a path traversal vulnerability in generate_images_openai.py that … | — |
|
2026-10-10 |
| CVE-2026-108594 | LOW | 3.5 | Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Conn… | — |
|
2026-10-10 |
| CVE-2026-108505 | LOW | 3.3 | ZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture… |
T1190
T1203
|
|
2026-10-10 |
| CVE-2026-108503 | LOW | 3.3 | ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided … | — |
|
2026-10-10 |
| CVE-2026-108502 | LOW | 3.3 | ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applicatio… | — |
|
2026-10-10 |
| CVE-2026-104006 | LOW | 3.7 | The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive I… | — |
|
2026-10-10 |
| CVE-2026-105977 | LOW | 2.2 | The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorizat… |
T1190
T1203
|
|
2026-10-10 |
| CVE-2026-104754 | LOW | 3.5 | The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value… |
T1190
T1059
+1
|
|
2026-10-10 |
| CVE-2026-104742 | LOW | 3.1 | The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to au… | — |
|
2026-10-10 |
| CVE-2026-104741 | LOW | 3.1 | The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to au… | — |
|
2026-10-10 |
| CVE-2026-107848 | LOW | 3.5 | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, RequestTokenListener valid… | — |
|
2026-10-09 |
| CVE-2026-96395 | LOW | 3.6 | The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bou… | — |
|
2026-10-09 |
| CVE-2026-96394 | LOW | 2.9 | The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate ima… | — |
|
2026-10-09 |
| CVE-2026-96393 | LOW | 3.6 | The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checki… | — |
|
2026-10-09 |
| CVE-2026-101130 | LOW | 3.6 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bound… | — |
|
2026-10-09 |
| CVE-2026-101094 | LOW | 3.6 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incom… | — |
|
2026-10-09 |
| CVE-2026-78021 | LOW | 3.7 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generatio… | — |
|
2026-10-09 |
| CVE-2026-78017 | LOW | 3.8 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper… | — |
|
2026-10-09 |
| CVE-2026-78016 | LOW | 3.1 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper… | — |
|
2026-10-09 |
| CVE-2026-78015 | LOW | 3.7 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of L… | — |
|
2026-10-09 |