CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-105099 | LOW | 3.5 | A weakness has been identified in Omega Solution CoinEx Crypto 2025. Affected by this vulnerability … | — |
|
2026-10-04 |
| CVE-2026-105130 | LOW | 3.7 | LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController:… |
T1078
T1548
|
|
2026-10-04 |
| CVE-2026-105125 | LOW | 3.7 | LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attac… | — |
|
2026-10-04 |
| CVE-2026-96962 | LOW | 3.7 | The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code re… | — |
|
2026-10-03 |
| CVE-2026-86834 | LOW | 3.7 | The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writ… | — |
|
2026-10-03 |
| CVE-2026-80518 | LOW | 3.7 | The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use a site-specific secret when d… | — |
|
2026-10-03 |
| CVE-2026-80517 | LOW | 3.5 | The WP Ultimate CSV Importer WordPress plugin before 9.2 does not properly validate the file types … | — |
|
2026-10-03 |
| CVE-2026-105083 | LOW | 3.9 | ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache … |
T1190
T1203
|
|
2026-10-03 |
| CVE-2026-105051 | LOW | 1.9 | Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interce… |
T1190
T1059
+1
|
|
2026-10-02 |
| CVE-2026-105043 | LOW | 3.6 | MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never v… | — |
|
2026-10-02 |
| CVE-2026-104994 | LOW | 2.5 | Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to ac… | — |
|
2026-10-02 |
| CVE-2026-39601 | LOW | 3.7 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerab… | — |
|
2026-10-02 |
| CVE-2026-104436 | LOW | 3.7 | Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2… | — |
|
2026-10-02 |
| CVE-2026-104424 | LOW | 3.7 | Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template sel… | — |
|
2026-10-02 |
| CVE-2026-104415 | LOW | 3.1 | Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API tha… | — |
|
2026-10-02 |
| CVE-2026-102002 | LOW | 3.1 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is… | — |
|
2026-10-02 |
| CVE-2026-91023 | LOW | 3.1 | The Motors WordPress plugin before 1.4.124 does not properly verify that a user is authorised to mo… | — |
|
2026-10-02 |
| CVE-2026-67172 | LOW | 3.7 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application… | — |
|
2026-10-01 |
| CVE-2026-21833 | LOW | 3.7 | HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response hea… | — |
|
2026-10-01 |
| CVE-2026-42356 | LOW | 3.7 | Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal r… | — |
|
2026-10-01 |