CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-113396 | HIGH | 7.4 | A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is t… | — |
|
2026-10-20 |
| CVE-2026-113395 | HIGH | 7.4 | A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element… | — |
|
2026-10-20 |
| CVE-2026-113394 | HIGH | 7.4 | A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function … | — |
|
2026-10-20 |
| CVE-2026-113619 | HIGH | 7.5 | In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that… | — |
|
2026-10-20 |
| CVE-2026-113392 | HIGH | 7.4 | A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unk… | — |
|
2026-10-20 |
| CVE-2026-105941 | HIGH | 8.1 | The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserializ… | — |
|
2026-10-20 |
| CVE-2026-105949 | HIGH | 8.8 | Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs … | — |
|
2026-10-20 |
| CVE-2026-105311 | HIGH | 7.7 | The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to cr… |
T1190
T1059
+1
|
|
2026-10-20 |
| CVE-2026-113358 | HIGH | 7.5 | LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that… | — |
|
2026-10-20 |
| CVE-2026-113356 | HIGH | 7.5 | DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() t… | — |
|
2026-10-20 |
| CVE-2026-113352 | HIGH | 7.5 | uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitra… | — |
|
2026-10-20 |
| CVE-2026-108089 | HIGH | 7.5 | ** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control … | — |
|
2026-10-20 |
| CVE-2026-113381 | HIGH | 7.3 | A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the functio… | — |
|
2026-10-20 |
| CVE-2026-113469 | HIGH | 7.5 | A failure has been identified in the SNS during dynamic data files signature check. A logic error… | — |
|
2026-10-20 |
| CVE-2026-113407 | HIGH | 8.8 | BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attacke… | — |
|
2026-10-20 |
| CVE-2026-113406 | HIGH | 8.8 | BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attacke… | — |
|
2026-10-20 |
| CVE-2026-113405 | HIGH | 8.8 | BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attacke… | — |
|
2026-10-20 |
| CVE-2026-112177 | HIGH | 7.3 | A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2… | — |
|
2026-10-20 |
| CVE-2026-111090 | HIGH | 7.8 | A logic error exists in the signature verification routine resulting in acceptance of unauthenticate… | — |
|
2026-10-20 |
| CVE-2026-113404 | HIGH | 8.8 | WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attack… | — |
|
2026-10-20 |