CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115776 | HIGH | 7.5 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.1… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-79982 | HIGH | 8.8 | The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_h… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-79979 | HIGH | 7.8 | The arm64 MMU backend invalidates a single virtual address from the TLB with invalidate_tlb_page() i… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-79977 | HIGH | 8.2 | The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from a message … |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-19741 | HIGH | 7.5 | Zephyr's OpenThread integration defined CONFIG_OPENTHREAD_JOINER_PSKD with default "J01NME" in modul… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-115570 | HIGH | 7.4 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and C… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-112342 | HIGH | 7.1 | Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission_hel… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115863 | HIGH | 7.6 | ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-110975 | HIGH | 7.4 | A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the end… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-87901 | HIGH | 8.3 | Improper sanitization in the registration module allows reflected Cross-Site Scripting. |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115810 | HIGH | 7.7 | Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle impo… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-106069 | HIGH | 7.4 | A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-105483 | HIGH | 7.4 | A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN t… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-105482 | HIGH | 7.4 | A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by … |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-57845 | HIGH | 8.8 | Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows a… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-55459 | HIGH | 7.4 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-55457 | HIGH | 7.4 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-39902 | HIGH | 7.2 | Cacti is an open source performance and fault management framework. Prior to version 1.2.31, the pri… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-106765 | HIGH | 7.5 | An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-106764 | HIGH | 7.5 | An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the re… |
T1190
T1059
+1
|
|
2026-10-23 |