CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115390 | MEDIUM | 5.7 | Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift-… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115388 | MEDIUM | 6.2 | wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does n… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-115387 | MEDIUM | 6.2 | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial of service… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115385 | MEDIUM | 6.2 | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115383 | MEDIUM | 4.8 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115382 | MEDIUM | 4.8 | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115381 | MEDIUM | 4.8 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an unbounded memory… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115380 | MEDIUM | 4.0 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains a denial of service… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-115379 | MEDIUM | 5.7 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability t… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115378 | MEDIUM | 5.8 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vuln… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115373 | MEDIUM | 6.3 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vuln… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115370 | MEDIUM | 4.3 | Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115365 | MEDIUM | 6.6 | OpenBao from 2.3.0 before 2.6.3 contains an incorrect authorization vulnerability in its ACL policy … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115361 | MEDIUM | 4.1 | OpenBao before 2.6.3 contains an ACL bypass vulnerability that silently drops explicit deny rules ba… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115360 | MEDIUM | 4.7 | OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-115356 | MEDIUM | 5.4 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not verify, when renewing a token issued by the Kub… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115354 | MEDIUM | 6.5 | Mistune before 3.3.0 contains a path traversal vulnerability in the opt-in Include directive that al… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115351 | MEDIUM | 4.7 | Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attackers control… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115350 | MEDIUM | 6.1 | Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emi… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114655 | MEDIUM | 5.9 | libmongocrypt builds requests to external key management services (AWS, Azure and GCP) by inserting … |
T1190
T1203
|
|
2026-10-22 |