CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-114080 | MEDIUM | 5.0 | Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows auth… | — |
|
2026-10-21 |
| CVE-2026-114079 | MEDIUM | 5.4 | Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of low… | — |
|
2026-10-21 |
| CVE-2026-114076 | MEDIUM | 5.4 | Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows auth… | — |
|
2026-10-21 |
| CVE-2026-114075 | MEDIUM | 5.4 | Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capa… | — |
|
2026-10-21 |
| CVE-2026-114074 | MEDIUM | 5.4 | Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows authentic… | — |
|
2026-10-21 |
| CVE-2026-114073 | MEDIUM | 5.5 | Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved … | — |
|
2026-10-21 |
| CVE-2026-114072 | MEDIUM | 4.3 | The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its orga… | — |
|
2026-10-21 |
| CVE-2026-114067 | MEDIUM | 6.5 | Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT snapshot-… | — |
|
2026-10-21 |
| CVE-2026-114065 | MEDIUM | 6.5 | Trigger.dev before 4.7.3 contains a tenant filtering bypass vulnerability that allows authenticated … | — |
|
2026-10-21 |
| CVE-2026-114064 | MEDIUM | 5.5 | Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing fe… | — |
|
2026-10-21 |
| CVE-2026-114062 | MEDIUM | 5.3 | SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attac… | — |
|
2026-10-21 |
| CVE-2026-114061 | MEDIUM | 4.7 | SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered … | — |
|
2026-10-21 |
| CVE-2026-114060 | MEDIUM | 4.7 | SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form acti… | — |
|
2026-10-21 |
| CVE-2026-114058 | MEDIUM | 4.3 | ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt proto… | — |
|
2026-10-21 |
| CVE-2026-114057 | MEDIUM | 4.3 | ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt proto… | — |
|
2026-10-21 |
| CVE-2026-114056 | MEDIUM | 4.3 | ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-… | — |
|
2026-10-21 |
| CVE-2026-114054 | MEDIUM | 6.5 | vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to co… | — |
|
2026-10-21 |
| CVE-2026-114047 | MEDIUM | 6.8 | FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its pr… | — |
|
2026-10-21 |
| CVE-2026-114046 | MEDIUM | 6.5 | FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend t… | — |
|
2026-10-21 |
| CVE-2026-114044 | MEDIUM | 5.3 | FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that al… | — |
|
2026-10-21 |