CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118377 | HIGH | 7.5 | mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability that… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118376 | MEDIUM | 5.3 | WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that m… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118375 | HIGH | 8.1 | llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA tra… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118374 | MEDIUM | 5.9 | LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OC… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118373 | LOW | 3.7 | LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host() … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118372 | LOW | 3.7 | LibreSSL ocspcheck through 4.4.0 contains a CRLF injection vulnerability that allows attackers to in… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118371 | LOW | 3.7 | LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSP_sendreq_new() a… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118370 | MEDIUM | 5.9 | libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlpar… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118274 | MEDIUM | 4.3 | A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unk… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118273 | MEDIUM | 4.3 | A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the funct… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-117610 | MEDIUM | 5.9 | libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProces… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-117609 | HIGH | 7.1 | rtl_433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2_mc() that al… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-117608 | MEDIUM | 6.1 | Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader() tha… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-117607 | HIGH | 7.2 | Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows auth… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-117606 | MEDIUM | 5.4 | NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated cashi… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-117605 | MEDIUM | 4.3 | nopCommerce before 5.00.0 contains a missing authorization vulnerability in the admin ProductControl… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-115624 | MEDIUM | 5.3 | GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-111314 | HIGH | 7.2 | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vul… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-109999 | HIGH | 7.2 | The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automa… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-109974 | MEDIUM | 6.4 | The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plug… |
T1190
T1203
|
|
2026-10-28 |