CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116106 | HIGH | 7.3 | A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulne… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116094 | HIGH | 7.3 | A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_file_to_loca… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116062 | HIGH | 7.3 | A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue a… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116061 | HIGH | 7.3 | A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerabilit… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116060 | HIGH | 7.3 | A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an u… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116211 | HIGH | 8.2 | YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the… |
T1190
T1005
+1
|
|
2026-10-25 |
| CVE-2026-116208 | HIGH | 8.1 | YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116204 | HIGH | 8.1 | YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116201 | HIGH | 8.8 | Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116199 | HIGH | 8.1 | Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallbac… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116191 | HIGH | 7.5 | Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthentic… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116189 | HIGH | 7.5 | rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116183 | HIGH | 7.5 | phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unaut… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116180 | HIGH | 7.7 | vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/o… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116179 | HIGH | 7.5 | vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients … |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116177 | HIGH | 7.5 | vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allo… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116176 | HIGH | 8.2 | vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API c… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116171 | HIGH | 7.5 | SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath be… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116163 | HIGH | 7.4 | Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass becaus… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116149 | HIGH | 8.1 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the h… |
T1190
T1059
+1
|
|
2026-10-25 |