CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-96810 | LOW | 3.5 | A vulnerability was identified in huanzi-qch base-admin up to 52816b760cd53244989fd664bbb2b3d4edbfdb… | — |
|
2026-09-24 |
| CVE-2026-92628 | LOW | 3.1 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 … | — |
|
2026-09-24 |
| CVE-2026-96552 | LOW | 3.1 | A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8… | — |
|
2026-09-23 |
| CVE-2026-96550 | LOW | 3.7 | A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. Thi… | — |
|
2026-09-23 |
| CVE-2026-96549 | LOW | 3.3 | A vulnerability has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8… |
T1190
T1203
|
|
2026-09-23 |
| CVE-2026-96546 | LOW | 2.5 | A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a us… | — |
|
2026-09-23 |
| CVE-2026-71465 | LOW | 3.1 | RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) ins… | — |
|
2026-09-23 |
| CVE-2026-71464 | LOW | 3.1 | LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash… | — |
|
2026-09-23 |
| CVE-2026-71463 | LOW | 2.7 | Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic … | — |
|
2026-09-23 |
| CVE-2026-96675 | LOW | 3.3 | alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fa… | — |
|
2026-09-23 |
| CVE-2026-4921 | LOW | 2.7 | IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information… |
T1190
T1203
|
|
2026-09-23 |
| CVE-2026-71178 | LOW | 3.7 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of N… |
T1078
T1548
|
|
2026-09-23 |
| CVE-2026-77756 | LOW | 3.7 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Ap… |
T1190
T1203
|
|
2026-09-23 |
| CVE-2026-87848 | LOW | 3.7 | The MPCX Lightbox WordPress plugin 1.2.2 through 1.2.5 does not have any authorisation or authentica… |
T1078
T1548
|
|
2026-09-23 |
| CVE-2026-93528 | LOW | 3.7 | The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership … |
T1190
T1059
+1
|
|
2026-09-23 |
| CVE-2026-93507 | LOW | 3.3 | The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify… |
T1190
T1203
|
|
2026-09-23 |
| CVE-2026-91077 | LOW | 2.7 | The Event Booking Manager for WooCommerce WordPress plugin before 5.7.3 does not restrict its event… |
T1190
T1059
+1
|
|
2026-09-23 |
| CVE-2026-90951 | LOW | 3.7 | The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenti… |
T1078
T1548
|
|
2026-09-23 |
| CVE-2026-87074 | LOW | 3.7 | The Forminator Forms WordPress plugin before 1.57.2.1 does not bind its saved-draft notification to… |
T1078
T1548
|
|
2026-09-23 |
| CVE-2026-87069 | LOW | 3.1 | The Forminator Forms WordPress plugin before 1.57.2.1 does not perform a nonce, capability or owner… |
T1190
T1203
|
|
2026-09-23 |