CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115348 | HIGH | 7.5 | Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link … |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-115347 | HIGH | 7.5 | Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parse_link_text… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114648 | HIGH | 7.6 | The MongoDB C# Driver does not neutralize dot and dollar characters in dictionary keys, field names … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114613 | HIGH | 7.5 | MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-pyt… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-97635 | HIGH | 8.1 | The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages o… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-13599 | HIGH | 7.8 | Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affe… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-113874 | HIGH | 8.1 | SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously establ… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-113873 | HIGH | 7.5 | SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated atta… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-75508 | HIGH | 7.5 | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.2.3 until 3.2.12 an… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-75507 | HIGH | 7.5 | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 an… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-115513 | HIGH | 8.7 | OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privil… |
T1068
T1134
|
|
2026-10-22 |
| CVE-2026-115416 | HIGH | 7.7 | Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114605 | HIGH | 7.5 | dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-co… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-104068 | HIGH | 7.2 | JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulner… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115482 | HIGH | 7.5 | In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-61791 | HIGH | 7.4 | OCO-Server is a self-hosted endpoint management application for computer inventory, software deploym… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114510 | HIGH | 7.1 | Flexible GraphRAG is a Python framework for building graph and retrieval-augmented generation applic… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-113872 | HIGH | 7.5 | multer is a middleware for Node.js that handles multipart/form-data file uploads. In versions from 2… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-111181 | HIGH | 7.5 | body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in ver… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-92709 | HIGH | 8.1 | Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfi… |
T1190
T1203
|
|
2026-10-22 |