CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-56599 | LOW | 2.2 | HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerabilit… | — |
|
2026-10-01 |
| CVE-2026-66253 | LOW | 3.1 | iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an… | — |
|
2026-10-01 |
| CVE-2026-66249 | LOW | 3.1 | iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to i… | — |
|
2026-10-01 |
| CVE-2026-66248 | LOW | 3.1 | iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticat… | — |
|
2026-10-01 |
| CVE-2026-103686 | LOW | 3.5 | A flaw has been found in rhukster dom-sanitizer up to 1.0.15. Impacted is the function DOMSanitizer:… | — |
|
2026-10-01 |
| CVE-2026-103680 | LOW | 3.1 | A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function … | — |
|
2026-10-01 |
| CVE-2026-103290 | LOW | 3.8 | Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the… | — |
|
2026-10-01 |
| CVE-2026-103287 | LOW | 2.7 | Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webho… | — |
|
2026-10-01 |
| CVE-2026-103489 | LOW | 2.0 | In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was po… | — |
|
2026-10-01 |
| CVE-2026-87973 | LOW | 3.1 | The If-So Dynamic Content WordPress plugin before 1.10.2 does not sanitize a conversion name before… |
T1190
T1203
|
|
2026-10-01 |
| CVE-2026-101887 | LOW | 3.5 | BlueALSA (bluez-alsa/bluealsad) contains a division-by-zero vulnerability in the LC3plus sink decode… | — |
|
2026-10-01 |
| CVE-2026-102138 | LOW | 3.3 | An authenticated administrator on a node with an optional, separately licensed gateway role enabled … | — |
|
2026-09-30 |
| CVE-2026-103436 | LOW | 3.7 | apcupsd through 3.14.14 discloses uninitialized stack memory in getupsvar() in src/cgi/upsfetch.c (u… | — |
|
2026-09-30 |
| CVE-2026-100280 | LOW | 3.1 | In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was … | — |
|
2026-09-30 |
| CVE-2026-100271 | LOW | 2.7 | In JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authent… | — |
|
2026-09-30 |
| CVE-2026-100270 | LOW | 3.3 | In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integ… | — |
|
2026-09-30 |
| CVE-2026-100264 | LOW | 2.7 | In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by chang… | — |
|
2026-09-30 |
| CVE-2026-27085 | LOW | 2.7 | Shop manager Content Injection in Astra WordPress Theme <= 4.13.12 versions. | — |
|
2026-09-30 |
| CVE-2026-102587 | LOW | 2.7 | A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on use… | — |
|
2026-09-30 |
| CVE-2026-102583 | LOW | 2.7 | A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor… | — |
|
2026-09-30 |