CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119053 | MEDIUM | 5.3 | lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in s… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-119052 | HIGH | 7.5 | llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server th… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-119051 | MEDIUM | 5.9 | flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten() that al… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-119050 | HIGH | 8.1 | Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119049 | HIGH | 7.6 | FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119048 | MEDIUM | 4.2 | JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI C… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118425 | MEDIUM | 6.8 | A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identity and acc… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-116857 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116402 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brain… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-116399 | HIGH | 8.8 | Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Connect instawp-connect allows Cr… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-113697 | NONE | — | Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-113696 | NONE | — | Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite ver… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-113695 | NONE | — | Reflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Mana… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-113694 | NONE | — | Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite ver… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-113693 | NONE | — | Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Managemen… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-113692 | NONE | — | Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-113691 | NONE | — | Stored cross-site scripting in the SmartIT knowledge-article feature of BMC IT Service Management Su… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2019-25781 | HIGH | 7.5 | Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link p… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-93011 | MEDIUM | 5.3 | A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC vali… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-93008 | MEDIUM | 6.8 | A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache record… |
T1190
T1203
|
|
2026-10-29 |