CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-106972 | NONE | — | Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-106971 | NONE | — | An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-93517 | NONE | — | A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-59959 | NONE | — | SAIL is a cross-platform library for loading and saving images with support for animation, metadata,… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-59185 | HIGH | 8.5 | identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-59179 | HIGH | 8.3 | OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, `@openhop/server` pas… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-59177 | HIGH | 8.8 | ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to 1… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-59176 | HIGH | 7.8 | Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the `set_functy… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-59172 | HIGH | 7.8 | Joker is a small Clojure interpreter, linter and formatter written in Go. Prior to 1.8.2, `joker --l… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-59164 | HIGH | 7.1 | NORA is a self-hosted artifact registry and pull-through cache. Prior to 0.9.5, `nora-registry` auth… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-52729 | HIGH | 7.1 | Xibo is an open source digital signage platform with a web content management system and Windows dis… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-50541 | MEDIUM | 6.5 | Xibo is an open source digital signage platform with a web content management system and Windows dis… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-116390 | HIGH | 7.2 | Deserialization of Untrusted Data vulnerability in stepasyuk Filter Everything — WordPress &… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-116389 | HIGH | 8.8 | Deserialization of Untrusted Data vulnerability in crossi72 Phoenix Media Rename phoenix-media-renam… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116078 | NONE | — | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-115968 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in Ultimate Member Ultimate Member ultimate-member a… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-115603 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-115590 | HIGH | 7.2 | Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.T… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-105420 | NONE | — | Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user d… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-93516 | MEDIUM | 5.5 | A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices… |
T1190
T1203
|
|
2026-10-28 |