CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115546 | HIGH | 8.1 | Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on. An au… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115486 | HIGH | 7.1 | A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler access… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115484 | HIGH | 7.6 | A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calcu… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-92450 | HIGH | 7.5 | The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON We… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-110825 | HIGH | 7.5 | The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-110491 | HIGH | 7.5 | The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-96185 | HIGH | 7.5 | Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute co… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114616 | HIGH | 7.4 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114615 | HIGH | 7.4 | Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, O… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-111594 | HIGH | 8.1 | InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attac… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-108456 | HIGH | 7.7 | Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate priv… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115419 | HIGH | 8.1 | The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Ag… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115417 | HIGH | 7.5 | Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqt… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115506 | HIGH | 7.5 | libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115505 | HIGH | 7.6 | libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerp… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115504 | HIGH | 7.8 | CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that t… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-112332 | HIGH | 7.5 | Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserial… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-112331 | HIGH | 7.5 | Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-112330 | HIGH | 7.5 | Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-95713 | HIGH | 7.0 | An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Succ… |
T1190
T1059
+1
|
|
2026-10-22 |