CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-114136 | HIGH | 7.5 | Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse … |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-114135 | HIGH | 8.8 | Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling Gateway… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-112408 | HIGH | 8.1 | Missing verification of source of a communication channel in the default_bucket() function in Amazon… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-111810 | HIGH | 7.5 | Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every … |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-111808 | HIGH | 8.6 | Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a malformed padded… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-111805 | HIGH | 8.6 | Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a truncated HTTP/2… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-79976 | HIGH | 7.1 | The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c emulates a small ps… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-78118 | HIGH | 7.0 | The kernel helper z_waitq_head() (kernel/include/wait_q.h) reads the head of a thread wait queue, bu… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-19676 | HIGH | 7.8 | The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/p… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-114267 | HIGH | 7.3 | A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unkn… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-113870 | HIGH | 8.8 | MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation p… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-111804 | HIGH | 8.2 | Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handl… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2025-55702 | HIGH | 8.7 | When a client sends a POST with Expect: 100-continue and the origin answers before reading the body,… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2025-31699 | HIGH | 8.9 | Apache Traffic Server can return an origin connection to the shared pool while the origin is still w… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-92210 | HIGH | 7.2 | NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-92209 | HIGH | 7.8 | NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-92208 | HIGH | 8.8 | NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability al… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-92207 | HIGH | 8.8 | MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. This vulnerability allows re… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-92206 | HIGH | 8.8 | CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vu… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-92204 | HIGH | 7.7 | Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosu… |
T1190
T1059
+1
|
|
2026-10-21 |