CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116142 | LOW | 3.3 | ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116140 | LOW | 3.3 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116137 | LOW | 3.7 | adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade th… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-115183 | LOW | 2.4 | The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's hea… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-114743 | LOW | 3.1 | The InstaWP Connect WordPress plugin before 0.1.4.2 does not perform a capability check on its Inst… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-114742 | LOW | 2.7 | The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-114741 | LOW | 3.8 | The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when read… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-111981 | LOW | 2.7 | The GiveWP WordPress plugin before 4.19.0.1 does not perform a capability check when handling donor… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2025-15705 | LOW | 3.5 | The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape a form nam… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116007 | LOW | 3.7 | A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The impacted element is t… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116004 | LOW | 3.5 | A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-115996 | LOW | 3.7 | A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This af… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115981 | LOW | 2.4 | A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116013 | LOW | 3.7 | OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_sec… |
T1190
T1059
+1
|
|
2026-10-24 |
| CVE-2026-116012 | LOW | 3.6 | Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and sk… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-113674 | LOW | 3.7 | The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings su… |
T1078
T1548
|
|
2026-10-24 |
| CVE-2026-83813 | LOW | 3.1 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.1… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-79978 | LOW | 3.6 | The RTIO streaming completion callback adxl345_process_fifo_samples_cb() in drivers/sensor/adi/adxl3… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115797 | LOW | 3.7 | A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the compo… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115569 | LOW | 3.3 | Fallow is a codebase intelligence tool for TypeScript and JavaScript. From 2.68.0 until 3.34.0, Fall… |
T1190
T1059
+1
|
|
2026-10-23 |