CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-106493 | LOW | 3.0 | Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalo… | — |
|
2026-10-06 |
| CVE-2026-106487 | LOW | 3.5 | Backstage is an open framework for building developer portals. Prior to 0.21.10, the @backstage/plug… | — |
|
2026-10-06 |
| CVE-2026-106449 | LOW | 3.7 | yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4BlockInputStr… | — |
|
2026-10-06 |
| CVE-2026-102164 | LOW | 3.1 | On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configura… | — |
|
2026-10-06 |
| CVE-2026-106399 | LOW | 3.3 | Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveragi… | — |
|
2026-10-06 |
| CVE-2026-106339 | LOW | 3.1 | Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker w… | — |
|
2026-10-06 |
| CVE-2026-106224 | LOW | 3.1 | Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attack… | — |
|
2026-10-06 |
| CVE-2026-106210 | LOW | 3.1 | Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker t… | — |
|
2026-10-06 |
| CVE-2026-106180 | LOW | 3.1 | Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacke… |
T1190
T1203
|
|
2026-10-06 |
| CVE-2026-106101 | LOW | 3.1 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.32.… | — |
|
2026-10-06 |
| CVE-2026-105950 | LOW | 3.5 | A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the fun… |
T1190
T1203
|
|
2026-10-06 |
| CVE-2026-105800 | LOW | 3.7 | i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, bro… | — |
|
2026-10-06 |
| CVE-2026-105795 | LOW | 3.1 | Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-ca… | — |
|
2026-10-06 |
| CVE-2026-106026 | LOW | 3.7 | tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewrite_string() in tftpd/re… | — |
|
2026-10-06 |
| CVE-2026-56596 | LOW | 3.5 | HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could… |
T1190
T1203
|
|
2026-10-06 |
| CVE-2026-105808 | LOW | 3.5 | A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnera… | — |
|
2026-10-06 |
| CVE-2026-105611 | LOW | 2.7 | A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown funct… | — |
|
2026-10-06 |
| CVE-2026-105752 | LOW | 3.1 | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, Harmony tool con… | — |
|
2026-10-05 |
| CVE-2026-105746 | LOW | 2.2 | Docling simplifies document processing by parsing diverse formats and providing integrations with th… | — |
|
2026-10-05 |
| CVE-2026-105742 | LOW | 3.7 | Docling simplifies document processing by parsing diverse formats and providing integrations with th… | — |
|
2026-10-05 |