CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-85498 | LOW | 3.5 | A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115303 | LOW | 3.7 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characters or re-v… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-85007 | LOW | 3.8 | The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability check on i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-108686 | LOW | 3.7 | The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it retu… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-108685 | LOW | 3.7 | The WP Post Author WordPress plugin before 4.2.0 does not check that the account was created before… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-105258 | LOW | 3.5 | The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several booking-form s… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2024-3586 | LOW | 3.5 | The LetterPress WordPress plugin before 2.4.0 does not sanitise and escape some of its settings, wh… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118585 | LOW | 3.5 | A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af1… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118691 | LOW | 3.7 | xianyu-auto-reply-fix through 2.0.7 contains a missing authorization vulnerability in the POST /send… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-3583 | LOW | 3.1 | When the `allowed_scopes` configuration is enabled, the OAuth2 token introspection mechanism does no… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118681 | LOW | 3.7 | go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118258 | LOW | 3.7 | i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, bro… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-105615 | LOW | 3.5 | PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on sai… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-105612 | LOW | 3.5 | PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only rest… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118608 | LOW | 3.5 | Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosur… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-103394 | LOW | 3.7 | An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Route… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-21830 | LOW | 3.7 | HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-87100 | LOW | 3.6 | Protection mechanism failure due to missing binary hardening in Linux executables. The following pro… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-87098 | LOW | 3.1 | Sensitive information disclosure due to improper authorization. The following products are affected:… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-90724 | LOW | 2.7 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS20… |
T1190
T1005
+1
|
|
2026-10-28 |