CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-106095 | LOW | 3.3 | The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its s… | — |
|
2026-10-09 |
| CVE-2026-87108 | LOW | 3.1 | An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring… | — |
|
2026-10-09 |
| CVE-2026-107890 | LOW | 3.3 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tag… | — |
|
2026-10-09 |
| CVE-2026-107886 | LOW | 2.3 | OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Mo… | — |
|
2026-10-09 |
| CVE-2026-107885 | LOW | 3.3 | OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-time… | — |
|
2026-10-09 |
| CVE-2026-107727 | LOW | 3.7 | Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy gr… | — |
|
2026-10-08 |
| CVE-2026-87980 | LOW | 3.1 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive i… |
T1190
T1203
|
|
2026-10-08 |
| CVE-2026-12091 | LOW | 3.7 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 … | — |
|
2026-10-08 |
| CVE-2026-11939 | LOW | 2.7 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 … | — |
|
2026-10-08 |
| CVE-2026-106432 | LOW | 3.6 | The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without valida… | — |
|
2026-10-08 |
| CVE-2026-106428 | LOW | 3.7 | An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one … | — |
|
2026-10-08 |
| CVE-2026-107296 | LOW | 3.7 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a nega… | — |
|
2026-10-08 |
| CVE-2026-107676 | LOW | 3.3 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plu… | — |
|
2026-10-08 |
| CVE-2026-107288 | LOW | 3.7 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. … | — |
|
2026-10-08 |
| CVE-2026-89290 | LOW | 3.5 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzome… | — |
|
2026-10-08 |
| CVE-2026-107570 | LOW | 2.5 | heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB wr… |
T1190
T1203
|
|
2026-10-08 |
| CVE-2026-94258 | LOW | 2.7 | The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed… | — |
|
2026-10-08 |
| CVE-2026-105197 | LOW | 2.7 | The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff u… | — |
|
2026-10-08 |
| CVE-2026-105196 | LOW | 3.3 | The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorizat… | — |
|
2026-10-08 |
| CVE-2026-105195 | LOW | 2.7 | The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a low… | — |
|
2026-10-08 |