CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116205 | MEDIUM | 5.3 | YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allo… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116203 | MEDIUM | 6.1 | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116202 | MEDIUM | 5.4 | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116200 | MEDIUM | 5.9 | Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing o… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116198 | MEDIUM | 4.3 | Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store tha… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116196 | MEDIUM | 5.3 | Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that leaks the … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116195 | MEDIUM | 6.1 | Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink fu… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116194 | MEDIUM | 6.8 | Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud b… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116193 | MEDIUM | 5.3 | Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav tha… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116192 | MEDIUM | 5.9 | rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unau… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116188 | MEDIUM | 5.3 | rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116187 | MEDIUM | 5.0 | Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116185 | MEDIUM | 5.0 | OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticat… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116182 | MEDIUM | 5.0 | phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export featur… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116181 | MEDIUM | 6.5 | vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remot… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116178 | MEDIUM | 5.9 | vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attacke… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116175 | MEDIUM | 6.5 | vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116174 | MEDIUM | 5.9 | vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116173 | MEDIUM | 5.9 | vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attacke… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116172 | MEDIUM | 5.9 | vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC … |
T1190
T1203
|
|
2026-10-25 |