CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-106700 | HIGH | 8.8 | ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management en… | — |
|
2026-10-15 |
| CVE-2026-97370 | HIGH | 7.5 | Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/jav… | — |
|
2026-10-15 |
| CVE-2026-87018 | HIGH | 7.5 | undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0… | — |
|
2026-10-15 |
| CVE-2026-55872 | HIGH | 8.7 | GYM One is open-source gym management software for fitness centers, personal trainers, and sports cl… | — |
|
2026-10-15 |
| CVE-2026-55587 | HIGH | 8.1 | AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the Al… | — |
|
2026-10-15 |
| CVE-2026-55239 | HIGH | 8.8 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29,… | — |
|
2026-10-15 |
| CVE-2026-36436 | HIGH | 7.5 | An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the ad… | — |
|
2026-10-15 |
| CVE-2026-111231 | HIGH | 7.2 | Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-onl… | — |
|
2026-10-15 |
| CVE-2026-111229 | HIGH | 7.2 | pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_… | — |
|
2026-10-15 |
| CVE-2026-111226 | HIGH | 7.2 | pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authentica… | — |
|
2026-10-15 |
| CVE-2026-111224 | HIGH | 7.5 | pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.conne… | — |
|
2026-10-15 |
| CVE-2026-111223 | HIGH | 7.2 | Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows … | — |
|
2026-10-15 |
| CVE-2026-111220 | HIGH | 7.2 | pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that… | — |
|
2026-10-15 |
| CVE-2026-111218 | HIGH | 7.2 | Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows au… | — |
|
2026-10-15 |
| CVE-2026-111217 | HIGH | 7.2 | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenti… | — |
|
2026-10-15 |
| CVE-2026-111216 | HIGH | 7.2 | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenti… | — |
|
2026-10-15 |
| CVE-2026-111215 | HIGH | 7.2 | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenti… | — |
|
2026-10-15 |
| CVE-2026-111214 | HIGH | 7.2 | Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows au… | — |
|
2026-10-15 |
| CVE-2026-111160 | HIGH | 7.5 | LightLLM through 1.2.0 contains a denial of service vulnerability that allows unauthenticated attack… | — |
|
2026-10-15 |
| CVE-2026-109869 | HIGH | 7.5 | undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30… | — |
|
2026-10-15 |