CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-113808 | HIGH | 7.1 | A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the capt… | — |
|
2026-10-20 |
| CVE-2026-111767 | HIGH | 8.6 | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Fr… | — |
|
2026-10-20 |
| CVE-2026-100134 | HIGH | 8.8 | Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary … | — |
|
2026-10-20 |
| CVE-2026-113711 | HIGH | 7.5 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS … | — |
|
2026-10-20 |
| CVE-2026-113666 | HIGH | 7.1 | ApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and … | — |
|
2026-10-20 |
| CVE-2026-28328 | HIGH | 8.8 | SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that … | — |
|
2026-10-20 |
| CVE-2026-113658 | HIGH | 7.5 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the unauthentica… | — |
|
2026-10-20 |
| CVE-2026-113682 | HIGH | 7.4 | Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicA… | — |
|
2026-10-20 |
| CVE-2026-113679 | HIGH | 7.0 | HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebA… | — |
|
2026-10-20 |
| CVE-2026-113613 | HIGH | 8.1 | FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows r… | — |
|
2026-10-20 |
| CVE-2026-113606 | HIGH | 7.1 | Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenti… | — |
|
2026-10-20 |
| CVE-2026-113605 | HIGH | 7.2 | Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSq… | — |
|
2026-10-20 |
| CVE-2026-112836 | HIGH | 8.8 | Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRentCar vikrentcar allows Cross Site … | — |
|
2026-10-20 |
| CVE-2026-111765 | HIGH | 7.5 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starting in version 1.3.0.… | — |
|
2026-10-20 |
| CVE-2026-111764 | HIGH | 7.5 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the … | — |
|
2026-10-20 |
| CVE-2025-71436 | HIGH | 7.1 | Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerabi… | — |
|
2026-10-20 |
| CVE-2026-95168 | HIGH | 7.8 | An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_… |
T1190
T1059
+1
|
|
2026-10-20 |
| CVE-2026-113397 | HIGH | 7.4 | A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects … | — |
|
2026-10-20 |
| CVE-2026-112940 | HIGH | 7.1 | filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let … |
T1190
T1005
+1
|
|
2026-10-20 |
| CVE-2026-91041 | HIGH | 7.8 | Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap … | — |
|
2026-10-20 |