CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-114508 | MEDIUM | 6.5 | Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-114384 | MEDIUM | 6.3 | A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-114381 | MEDIUM | 6.3 | A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-96641 | MEDIUM | 6.5 | Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-96638 | MEDIUM | 6.5 | Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpIm… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-96636 | MEDIUM | 6.5 | Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() rep… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-114406 | MEDIUM | 6.8 | The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-114380 | MEDIUM | 6.3 | A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown fu… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-114379 | MEDIUM | 5.4 | A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vulnerability affects the functio… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-114378 | MEDIUM | 6.3 | A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknow… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-85518 | MEDIUM | 6.1 | A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does … |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-114438 | MEDIUM | 4.2 | A flaw was found in the Update User Locale required action of the Keycloak identity and access manag… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-114376 | MEDIUM | 6.3 | A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerabilit… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-114375 | MEDIUM | 6.3 | A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1. Affected is the function… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-114374 | MEDIUM | 4.3 | A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown funct… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-114362 | MEDIUM | 6.3 | A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file g… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-112381 | MEDIUM | 5.9 | Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn d… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-111817 | MEDIUM | 5.3 | Apache Traffic Server can stall a chunked transfer that it passes through with its trailers removed … |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-78119 | MEDIUM | 6.3 | The Nuvoton NPCX eSPI driver parses Target-Attached-Flash (TAF) requests in espi_taf_parse() (driver… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-78117 | MEDIUM | 4.2 | The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the … |
T1190
T1059
+1
|
|
2026-10-21 |