CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119132 | MEDIUM | 4.8 | Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssem… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-119131 | MEDIUM | 5.3 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability in… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119130 | LOW | 2.6 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set-pat… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119129 | HIGH | 8.1 | ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 contains a missing authorization vulnerability … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119128 | HIGH | 7.4 | ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that … |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-119127 | HIGH | 8.1 | ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 UI that a… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-119126 | LOW | 3.1 | Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles dot notation keys with null o… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119125 | LOW | 3.1 | Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 returns the stored value of a field reve… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119124 | LOW | 3.3 | ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where cr… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-119123 | LOW | 3.7 | ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-119122 | MEDIUM | 5.3 | Crawl4AI before 0.9.5 contains a blind server-side request forgery vulnerability in the Docker serve… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119121 | MEDIUM | 4.3 | Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulnerability in the Docker API ser… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119120 | HIGH | 7.5 | Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Do… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119119 | HIGH | 7.5 | Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _cla… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-119118 | MEDIUM | 6.5 | Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118673 | NONE | — | KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118085 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions. |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118084 | MEDIUM | 6.5 | Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118083 | HIGH | 7.5 | Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-118082 | HIGH | 8.8 | Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions. |
T1068
T1134
|
|
2026-10-29 |