CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-93589 | LOW | 3.7 | ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF encoder. An i… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-93588 | LOW | 3.1 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM code… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-93587 | LOW | 3.3 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD (and, per the u… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-93586 | LOW | 2.9 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the Imag… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-28199 | LOW | 3.3 | An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary fi… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-21806 | LOW | 3.1 | HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. Th… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-56597 | LOW | 3.1 | HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which co… |
T1078
T1548
|
|
2026-09-18 |
| CVE-2026-56595 | LOW | 3.1 | HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-40538 | LOW | 3.7 | An improper restriction of excessive authentication attempts vulnerability in Auto block in Synology… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-13683 | LOW | 2.7 | An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerabilit… |
T1190
T1005
+1
|
|
2026-09-18 |
| CVE-2026-13666 | LOW | 3.5 | An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in Syno… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-89008 | LOW | 2.7 | The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform an auth… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-89007 | LOW | 2.7 | The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform a capab… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-88844 | LOW | 2.7 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that the reques… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-84904 | LOW | 3.8 | The King Addons for Elementor WordPress plugin before 51.1.81 does not perform per-object authoriza… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-84903 | LOW | 2.7 | The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-81340 | LOW | 3.8 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform per-object own… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-68493 | LOW | 3.1 | After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a … |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-93394 | LOW | 3.7 | A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authenti… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-93384 | LOW | 3.7 | Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed… |
T1190
T1203
|
|
2026-09-17 |