CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116170 | MEDIUM | 4.9 | SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read… |
T1190
T1005
+1
|
|
2026-10-25 |
| CVE-2026-116169 | MEDIUM | 5.4 | SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that allows use… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116168 | MEDIUM | 6.2 | SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP asset tool because validateAs… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116167 | MEDIUM | 6.8 | SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated … |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116166 | MEDIUM | 6.8 | SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS setting but never enforces it, so… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116155 | MEDIUM | 5.3 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of XMP p… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116154 | MEDIUM | 5.3 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code,… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116152 | MEDIUM | 5.3 | ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to re… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116141 | MEDIUM | 5.3 | ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that allows a… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116139 | MEDIUM | 5.4 | WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site scripting vulnerability that allows aut… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116053 | MEDIUM | 5.3 | A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the funct… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116052 | MEDIUM | 4.3 | A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is a… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116136 | MEDIUM | 5.9 | ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116073 | MEDIUM | 6.5 | Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116072 | MEDIUM | 5.4 | Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that all… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116071 | MEDIUM | 5.9 | rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-forc… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116070 | MEDIUM | 6.5 | Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/co… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116069 | MEDIUM | 6.5 | NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that all… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116066 | MEDIUM | 6.8 | Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright ser… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116047 | MEDIUM | 4.3 | A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown pr… |
T1190
T1203
|
|
2026-10-25 |