CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-100880 | LOW | 3.5 | A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects un… | — |
|
2026-09-27 |
| CVE-2026-101057 | LOW | 3.1 | utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server… | — |
|
2026-09-27 |
| CVE-2026-101051 | LOW | 3.1 | Cloudreve before 4.16.1 fails to properly sanitize file paths returned by remote downloaders, allowi… | — |
|
2026-09-27 |
| CVE-2026-101046 | LOW | 3.1 | Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api… | — |
|
2026-09-27 |
| CVE-2026-100867 | LOW | 3.3 | spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version f… | — |
|
2026-09-27 |
| CVE-2026-100866 | LOW | 3.3 | onefetch through 2.28.1 writes repository information field values to the terminal without removing … | — |
|
2026-09-27 |
| CVE-2026-86839 | LOW | 3.8 | The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not verify t… | — |
|
2026-09-27 |
| CVE-2026-100837 | LOW | 3.7 | Contrast (Edgeless Systems) through 1.20.0 performs unanchored suffix matching when selecting per-re… | — |
|
2026-09-27 |
| CVE-2025-71424 | LOW | 3.5 | Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versio… | — |
|
2026-09-27 |
| CVE-2026-100649 | LOW | 3.7 | vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocati… | — |
|
2026-09-26 |
| CVE-2026-100620 | LOW | 3.8 | Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service accoun… | — |
|
2026-09-26 |
| CVE-2026-100311 | LOW | 3.5 | A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d6… |
T1190
T1203
|
|
2026-09-26 |
| CVE-2026-96526 | LOW | 2.7 | The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authori… |
T1190
T1203
|
|
2026-09-26 |
| CVE-2026-96525 | LOW | 2.7 | The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an ownership or suffici… |
T1190
T1203
|
|
2026-09-26 |
| CVE-2026-100573 | LOW | 3.3 | OpenClaw versions before 2026.8.1 contain a sandbox policy bypass vulnerability in the MCP loopback … | — |
|
2026-09-26 |
| CVE-2026-100542 | LOW | 3.1 | OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in… | — |
|
2026-09-26 |
| CVE-2026-100539 | LOW | 2.6 | OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an operato… | — |
|
2026-09-26 |
| CVE-2026-100537 | LOW | 3.1 | OpenClaw (npm package 'openclaw') before 2026.8.1 fails to apply the originating requester's effecti… | — |
|
2026-09-26 |
| CVE-2026-100534 | LOW | 3.1 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow … |
T1190
T1203
|
|
2026-09-26 |
| CVE-2026-100503 | LOW | 3.3 | Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcd… | — |
|
2026-09-26 |