CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118689 | HIGH | 7.5 | OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader()… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118682 | HIGH | 7.5 | KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118669 | NONE | — | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, th… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118538 | MEDIUM | 5.5 | A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Ro… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118537 | MEDIUM | 4.3 | A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116641 | MEDIUM | 6.8 | The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the s… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118668 | NONE | — | langgraph-api implements the LangGraph API for rapid development and testing. From 0.1.2 until 0.15.… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118667 | MEDIUM | 4.3 | LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118666 | NONE | — | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to vers… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118665 | NONE | — | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to vers… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118664 | NONE | — | decode-uri-component provides a more robust alternative to decodeURIComponent. Prior to 0.5.1, decod… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118663 | MEDIUM | 5.3 | @hono/node-server allows running the Hono application on Node.js. From 1.19.10 until 2.1.3, serveSta… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118662 | NONE | — | Vite is a frontend tooling framework for JavaScript. From 6.4.4 until 6.4.5, the Vite development se… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118661 | MEDIUM | 6.5 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prio… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118660 | HIGH | 8.6 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prio… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118659 | HIGH | 7.5 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prio… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118658 | MEDIUM | 4.7 | Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarde… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118657 | MEDIUM | 5.9 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.Scheme unconditionally trusts forward… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118656 | MEDIUM | 6.1 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes o… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-78674 | HIGH | 8.8 | The BPMN System REST APIs do not sufficiently validate input parameters, allowing authenticated user… |
T1190
T1059
+1
|
|
2026-10-28 |