CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111642 | HIGH | 8.8 | FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py t… | — |
|
2026-10-16 |
| CVE-2026-111639 | HIGH | 8.1 | bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/google_one_ta… | — |
|
2026-10-16 |
| CVE-2026-111638 | HIGH | 7.7 | sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key… | — |
|
2026-10-16 |
| CVE-2026-111636 | HIGH | 8.1 | OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthen… | — |
|
2026-10-16 |
| CVE-2026-111634 | HIGH | 8.1 | Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated view… | — |
|
2026-10-16 |
| CVE-2026-111633 | HIGH | 8.6 | ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated atta… | — |
|
2026-10-16 |
| CVE-2026-111627 | HIGH | 7.2 | HestiaCP before 1.10.5 contains an authorization bypass vulnerability that allows non-ROOT_USER admi… | — |
|
2026-10-16 |
| CVE-2026-111613 | HIGH | 7.5 | AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote at… | — |
|
2026-10-16 |
| CVE-2026-111612 | HIGH | 7.5 | netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows una… | — |
|
2026-10-16 |
| CVE-2026-111607 | HIGH | 7.1 | Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenti… | — |
|
2026-10-16 |
| CVE-2026-111606 | HIGH | 8.1 | Huly Platform through 0.7.432 contains a missing authorization vulnerability that allows any authent… | — |
|
2026-10-16 |
| CVE-2026-111605 | HIGH | 8.1 | Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows… | — |
|
2026-10-16 |
| CVE-2026-109588 | HIGH | 8.8 | Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11… | — |
|
2026-10-16 |
| CVE-2026-109587 | HIGH | 8.8 | Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 … | — |
|
2026-10-16 |
| CVE-2026-102551 | HIGH | 7.7 | Improper verification of the source of a communication channel in the IPv6 Router Advertisement hand… | — |
|
2026-10-16 |
| CVE-2026-97380 | HIGH | 8.8 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1… | — |
|
2026-10-16 |
| CVE-2026-86047 | HIGH | 7.7 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1… | — |
|
2026-10-16 |
| CVE-2026-86008 | HIGH | 7.2 | Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf0366… | — |
|
2026-10-16 |
| CVE-2026-77474 | HIGH | 7.1 | destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands… | — |
|
2026-10-16 |
| CVE-2026-96424 | HIGH | 7.8 | Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary u… | — |
|
2026-10-16 |