CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-104645 | LOW | 2.7 | The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify aut… | — |
|
2026-10-08 |
| CVE-2026-107449 | LOW | 3.4 | linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to Item… | — |
|
2026-10-08 |
| CVE-2026-107448 | LOW | 3.4 | Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.6… | — |
|
2026-10-08 |
| CVE-2026-92862 | LOW | 3.3 | The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a mal… | — |
|
2026-10-08 |
| CVE-2026-87726 | LOW | 3.9 | Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may all… | — |
|
2026-10-08 |
| CVE-2026-107284 | LOW | 3.7 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and async… | — |
|
2026-10-07 |
| CVE-2026-107283 | LOW | 3.7 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and async… | — |
|
2026-10-07 |
| CVE-2026-107269 | LOW | 3.7 | Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows … | — |
|
2026-10-07 |
| CVE-2026-107170 | LOW | 2.9 | A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal … | — |
|
2026-10-07 |
| CVE-2026-104678 | LOW | 2.7 | The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settin… | — |
|
2026-10-07 |
| CVE-2026-106583 | LOW | 2.5 | In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to i… | — |
|
2026-10-07 |
| CVE-2026-106589 | LOW | 2.9 | In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-se… | — |
|
2026-10-06 |
| CVE-2026-106588 | LOW | 3.1 | In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of s… | — |
|
2026-10-06 |
| CVE-2026-106587 | LOW | 3.6 | In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted… | — |
|
2026-10-06 |
| CVE-2026-106496 | LOW | 3.1 | Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin… | — |
|
2026-10-06 |
| CVE-2026-106586 | LOW | 2.5 | In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applica… | — |
|
2026-10-06 |
| CVE-2026-106584 | LOW | 2.5 | In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of … | — |
|
2026-10-06 |
| CVE-2026-106582 | LOW | 3.7 | In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is con… | — |
|
2026-10-06 |
| CVE-2026-106555 | LOW | 2.2 | In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persist… | — |
|
2026-10-06 |
| CVE-2026-106553 | LOW | 2.2 | In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthent… | — |
|
2026-10-06 |