CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-62863 | CRITICAL | 9.6 | MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE m… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-62853 | CRITICAL | 9.9 | ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` end… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62849 | CRITICAL | 9.1 | ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerabi… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-78403 | CRITICAL | 9.8 | Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server o… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-61620 | CRITICAL | 9.8 | HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass u… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-55598 | CRITICAL | 9.1 | PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an au… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116241 | CRITICAL | 9.9 | pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-90888 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-39738 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automatio… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-39732 | CRITICAL | 9.3 | Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions. |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119526 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. Th… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116852 | CRITICAL | 9.1 | Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions. |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-116386 | CRITICAL | 9.8 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-118697 | CRITICAL | 9.0 | In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbr… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-61826 | CRITICAL | 10.0 | Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` na… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119706 | CRITICAL | 9.8 | InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerabili… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-61738 | CRITICAL | 10.0 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations nee… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-61737 | CRITICAL | 9.8 | ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded de… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-61730 | CRITICAL | 9.3 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations nee… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-61729 | CRITICAL | 9.4 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations nee… |
T1190
T1203
|
|
2026-10-30 |