CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-93515 | NONE | — | A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayl… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-67080 | MEDIUM | 6.5 | HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of er… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-67079 | MEDIUM | 6.4 | HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed t… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-67077 | MEDIUM | 4.2 | HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an atta… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-67074 | CRITICAL | 9.1 | HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to exec… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-67073 | HIGH | 8.6 | HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability.… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-55369 | MEDIUM | 6.5 | Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /a… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-21830 | LOW | 3.7 | HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118040 | HIGH | 7.5 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verificat… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118039 | HIGH | 7.5 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external en… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118038 | HIGH | 7.1 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal v… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118037 | HIGH | 7.5 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recur… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118036 | HIGH | 7.5 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recur… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118035 | HIGH | 7.5 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recur… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-116404 | MEDIUM | 6.5 | Missing Authorization vulnerability in David Anderson Redux Framework redux-framework allows Lifting… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116393 | HIGH | 7.5 | Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploi… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116392 | HIGH | 7.2 | Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object In… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116391 | HIGH | 8.8 | Deserialization of Untrusted Data vulnerability in GS Plugins GS Logo Slider gs-logo-slider allows O… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-115957 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-115904 | CRITICAL | 9.6 | Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior t… |
T1190
T1059
+1
|
|
2026-10-28 |