CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-106073 | LOW | 3.3 | A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the req… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-106071 | LOW | 3.6 | A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not matc… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-106070 | LOW | 3.7 | A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requ… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115751 | LOW | 3.7 | Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerabi… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115750 | LOW | 3.7 | mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows at… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115749 | LOW | 3.3 | hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary modu… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115730 | LOW | 3.1 | i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUrl() that allows attackers to r… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115724 | LOW | 2.9 | VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.ge… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-113501 | LOW | 3.1 | The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a capability check on its admin-n… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-112230 | LOW | 3.7 | The Popup Builder WordPress plugin before 4.4.6 does not perform authorization checks before trashi… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-111737 | LOW | 3.5 | The Speed Optimizer WordPress plugin before 7.8.5 does not sanitise or escape some of its settings … |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-110537 | LOW | 3.8 | The Essential Addons for Elementor WordPress plugin before 6.8.7 does not verify that an administra… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-110510 | LOW | 3.5 | The Essential Addons for Elementor WordPress plugin before 6.8.7 does not validate the HTML tag set… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115535 | LOW | 2.4 | A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d4… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115449 | LOW | 3.5 | A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to m… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114614 | LOW | 2.6 | Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, au… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-115507 | LOW | 3.5 | Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-95721 | LOW | 3.3 | A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful … |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-115393 | LOW | 3.8 | Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 conta… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115389 | LOW | 2.3 | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account … |
T1190
T1203
|
|
2026-10-22 |