CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-112260 | HIGH | 7.1 | A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a hea… | — |
|
2026-10-19 |
| CVE-2026-112252 | HIGH | 7.3 | A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production… | — |
|
2026-10-19 |
| CVE-2026-6719 | HIGH | 7.5 | IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an… | — |
|
2026-10-19 |
| CVE-2026-3295 | HIGH | 7.4 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑su… | — |
|
2026-10-19 |
| CVE-2026-112377 | HIGH | 7.4 | CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence… | — |
|
2026-10-19 |
| CVE-2026-111759 | HIGH | 7.5 | markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, spe… | — |
|
2026-10-19 |
| CVE-2025-52290 | HIGH | 7.5 | A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-11… | — |
|
2026-10-19 |
| CVE-2026-12665 | HIGH | 8.1 | IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when p… | — |
|
2026-10-19 |
| CVE-2026-12148 | HIGH | 7.5 | IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially ex… | — |
|
2026-10-19 |
| CVE-2026-10743 | HIGH | 8.8 | IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to i… | — |
|
2026-10-19 |
| CVE-2026-10574 | HIGH | 8.8 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb… |
T1190
T1059
+1
|
|
2026-10-19 |
| CVE-2026-10572 | HIGH | 8.8 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb… |
T1190
T1059
+1
|
|
2026-10-19 |
| CVE-2026-107187 | HIGH | 8.5 | A user can access any database details, such as usernames and passwords by sending a DWR request wit… | — |
|
2026-10-19 |
| CVE-2026-107186 | HIGH | 8.6 | An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the n… | — |
|
2026-10-19 |
| CVE-2026-107082 | HIGH | 8.8 | Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perf… | — |
|
2026-10-19 |
| CVE-2025-10149 | HIGH | 8.2 | The SCIM endpoint does not sufficiently validate authorization for federated users when performing o… | — |
|
2026-10-19 |
| CVE-2026-112368 | HIGH | 7.5 | An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an… | — |
|
2026-10-19 |
| CVE-2026-112366 | HIGH | 7.5 | Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows at… | — |
|
2026-10-19 |
| CVE-2026-112309 | HIGH | 7.5 | @rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauth… | — |
|
2026-10-19 |
| CVE-2026-112308 | HIGH | 7.4 | crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapin… | — |
|
2026-10-19 |