CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-114043 | MEDIUM | 6.5 | FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB sy… | — |
|
2026-10-21 |
| CVE-2026-114042 | MEDIUM | 6.5 | FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owne… | — |
|
2026-10-21 |
| CVE-2026-114041 | MEDIUM | 6.5 | FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_me… | — |
|
2026-10-21 |
| CVE-2026-114038 | MEDIUM | 5.1 | A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sendi… | — |
|
2026-10-21 |
| CVE-2026-113741 | MEDIUM | 4.3 | A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this iss… | — |
|
2026-10-21 |
| CVE-2026-113740 | MEDIUM | 6.3 | A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerabilit… | — |
|
2026-10-21 |
| CVE-2026-113738 | MEDIUM | 6.3 | A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd8537… | — |
|
2026-10-21 |
| CVE-2026-113737 | MEDIUM | 5.5 | A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a5… | — |
|
2026-10-21 |
| CVE-2025-71437 | MEDIUM | 6.5 | Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar e… | — |
|
2026-10-21 |
| CVE-2021-48020 | MEDIUM | 6.5 | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect st… | — |
|
2026-10-21 |
| CVE-2021-48019 | MEDIUM | 4.8 | Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function that … | — |
|
2026-10-21 |
| CVE-2020-37287 | MEDIUM | 5.9 | Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function out… | — |
|
2026-10-21 |
| CVE-2020-37286 | MEDIUM | 6.5 | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect st… | — |
|
2026-10-21 |
| CVE-2026-113707 | MEDIUM | 5.4 | A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the fu… | — |
|
2026-10-21 |
| CVE-2026-109682 | MEDIUM | 4.7 | Metasploit Framework versions before 6.5.7 allow HTTP requests made through send_request_cgi! to fol… | — |
|
2026-10-21 |
| CVE-2026-109681 | MEDIUM | 4.7 | The FTP client trusts the server's PASV response IP:port without validation against the control conn… | — |
|
2026-10-21 |
| CVE-2026-113705 | MEDIUM | 5.3 | A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown pro… | — |
|
2026-10-20 |
| CVE-2026-94402 | MEDIUM | 6.1 | IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart compon… | — |
|
2026-10-20 |
| CVE-2026-93744 | MEDIUM | 6.5 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restri… | — |
|
2026-10-20 |
| CVE-2026-91662 | MEDIUM | 6.4 | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affec… | — |
|
2026-10-20 |