CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-113489 | MEDIUM | 4.3 | The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belon… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-107907 | MEDIUM | 6.5 | The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check whe… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-107887 | MEDIUM | 5.4 | The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonc… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-105199 | MEDIUM | 6.8 | The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a capability c… |
T1190
T1059
+1
|
|
2026-10-24 |
| CVE-2026-115929 | MEDIUM | 6.8 | MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate … |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115886 | MEDIUM | 6.5 | MLflow is an open source AI engineering platform for agents, large language models, and machine lear… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115801 | MEDIUM | 5.3 | A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function … |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-75525 | MEDIUM | 5.3 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking pl… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-75524 | MEDIUM | 5.4 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking pl… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115877 | MEDIUM | 5.4 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.1… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115800 | MEDIUM | 5.3 | A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the f… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115774 | MEDIUM | 4.9 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.1… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-79981 | MEDIUM | 6.5 | The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server whe… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-79980 | MEDIUM | 5.6 | The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier (iface->co… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115796 | MEDIUM | 4.3 | A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115845 | MEDIUM | 6.4 | An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS M… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115813 | MEDIUM | 5.8 | Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-106074 | MEDIUM | 4.8 | A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-106072 | MEDIUM | 6.7 | A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-105481 | MEDIUM | 6.5 | A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that … |
T1190
T1203
|
|
2026-10-23 |