CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-61569 | HIGH | 7.5 | AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated streamer login at `objects/l… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-61567 | CRITICAL | 10.0 | AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLi… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-61564 | CRITICAL | 10.0 | AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-61546 | NONE | — | AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-57448 | NONE | — | Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prio… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-54455 | HIGH | 7.6 | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and h… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-54453 | HIGH | 7.2 | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and h… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118804 | HIGH | 7.5 | Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthent… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118803 | HIGH | 7.5 | Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability t… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118757 | MEDIUM | 6.5 | PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 contains a missing au… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118756 | MEDIUM | 5.5 | gopass before 1.17.0 contains a path traversal vulnerability in the filesystem storage backend that … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118755 | HIGH | 7.2 | Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118754 | MEDIUM | 5.3 | Dolibarr ERP CRM before 24.0.2 contains a missing authorization vulnerability in htdocs/public/recru… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118753 | HIGH | 7.8 | FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.c… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118752 | HIGH | 7.8 | FreeImage (danoli3 fork) before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118694 | HIGH | 7.5 | python-markdown2 through 2.5.5 contains a denial of service vulnerability that allows remote users t… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118693 | MEDIUM | 4.7 | CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_imag… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118692 | HIGH | 7.0 | CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::link_clicked t… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118691 | LOW | 3.7 | xianyu-auto-reply-fix through 2.0.7 contains a missing authorization vulnerability in the POST /send… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118690 | CRITICAL | 9.8 | Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenti… |
T1078
T1548
|
|
2026-10-28 |