CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-112307 | HIGH | 7.3 | sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject P… | — |
|
2026-10-19 |
| CVE-2026-112306 | HIGH | 7.2 | NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that… | — |
|
2026-10-19 |
| CVE-2026-112305 | HIGH | 8.8 | Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with t… | — |
|
2026-10-19 |
| CVE-2026-112304 | HIGH | 7.5 | docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() tha… | — |
|
2026-10-19 |
| CVE-2026-112153 | HIGH | 7.3 | A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365… | — |
|
2026-10-19 |
| CVE-2026-112152 | HIGH | 7.3 | A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc… | — |
|
2026-10-19 |
| CVE-2026-111045 | HIGH | 7.5 | CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink po… | — |
|
2026-10-19 |
| CVE-2026-109431 | HIGH | 8.1 | Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulne… | — |
|
2026-10-19 |
| CVE-2026-107571 | HIGH | 7.8 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 throug… | — |
|
2026-10-19 |
| CVE-2026-107569 | HIGH | 7.5 | Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a r… | — |
|
2026-10-19 |
| CVE-2026-107567 | HIGH | 7.5 | Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.… | — |
|
2026-10-19 |
| CVE-2026-112151 | HIGH | 7.3 | A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a4873… | — |
|
2026-10-19 |
| CVE-2026-112150 | HIGH | 7.3 | A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519… | — |
|
2026-10-19 |
| CVE-2026-112149 | HIGH | 7.3 | A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a4873… | — |
|
2026-10-19 |
| CVE-2026-112287 | HIGH | 7.1 | Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailControlle… | — |
|
2026-10-19 |
| CVE-2026-112264 | HIGH | 7.8 | BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attacke… | — |
|
2026-10-19 |
| CVE-2026-112263 | HIGH | 7.8 | Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows att… | — |
|
2026-10-19 |
| CVE-2026-112262 | HIGH | 7.1 | RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQ… | — |
|
2026-10-19 |
| CVE-2026-112146 | HIGH | 7.4 | A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown proces… | — |
|
2026-10-19 |
| CVE-2026-112145 | HIGH | 7.3 | A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerabil… | — |
|
2026-10-19 |