CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-92822 | MEDIUM | 6.2 | A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into neste… | — |
|
2026-10-21 |
| CVE-2026-114039 | MEDIUM | 6.3 | A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is … | — |
|
2026-10-21 |
| CVE-2026-113743 | MEDIUM | 6.3 | A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the fun… | — |
|
2026-10-21 |
| CVE-2026-114118 | MEDIUM | 4.8 | Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint25… | — |
|
2026-10-21 |
| CVE-2026-114117 | MEDIUM | 5.9 | Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len(ms… | — |
|
2026-10-21 |
| CVE-2026-114116 | MEDIUM | 5.3 | Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitl… | — |
|
2026-10-21 |
| CVE-2026-114114 | MEDIUM | 5.3 | Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line offsets … | — |
|
2026-10-21 |
| CVE-2026-114110 | MEDIUM | 5.3 | Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbi… | — |
|
2026-10-21 |
| CVE-2026-114105 | MEDIUM | 6.2 | Adm-zip before 0.6.1 contains an incorrect permission assignment vulnerability that allows attackers… | — |
|
2026-10-21 |
| CVE-2026-114104 | MEDIUM | 5.9 | adm-zip before 0.6.1 contains an inconsistent entry resolution vulnerability that allows attackers t… | — |
|
2026-10-21 |
| CVE-2026-114103 | MEDIUM | 5.3 | adm-zip 0.6.0 contains a decompression bomb protection bypass that allows attackers to evade the max… | — |
|
2026-10-21 |
| CVE-2026-114101 | MEDIUM | 4.0 | Coraza before 3.8.1 extracts multipart upload filenames with Go's mime.ParseMediaType, which silentl… | — |
|
2026-10-21 |
| CVE-2026-114100 | MEDIUM | 5.8 | Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body proces… | — |
|
2026-10-21 |
| CVE-2026-114099 | MEDIUM | 5.8 | Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot-se… | — |
|
2026-10-21 |
| CVE-2026-114095 | MEDIUM | 6.5 | Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve_object that allows a… | — |
|
2026-10-21 |
| CVE-2026-114093 | MEDIUM | 4.3 | Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote atta… | — |
|
2026-10-21 |
| CVE-2026-114092 | MEDIUM | 6.5 | Trigger.dev before 4.5.0 performs no authentication or organization check in the action handler of t… | — |
|
2026-10-21 |
| CVE-2026-114091 | MEDIUM | 5.3 | Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the api.v1.runs.$runParam.replay route… | — |
|
2026-10-21 |
| CVE-2026-114088 | MEDIUM | 6.5 | Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socke… | — |
|
2026-10-21 |
| CVE-2026-114086 | MEDIUM | 5.3 | Trigger.dev before 4.5.5 contains a missing authentication vulnerability in the realtime streams POS… | — |
|
2026-10-21 |