CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-110767 | HIGH | 7.5 | Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob … | — |
|
2026-10-14 |
| CVE-2026-110761 | HIGH | 8.8 | ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authent… | — |
|
2026-10-14 |
| CVE-2026-110667 | HIGH | 7.3 | A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an u… | — |
|
2026-10-14 |
| CVE-2026-102944 | HIGH | 7.5 | cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, create_redirect_client() remov… | — |
|
2026-10-14 |
| CVE-2026-92158 | HIGH | 7.2 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde… | — |
|
2026-10-14 |
| CVE-2026-92155 | HIGH | 7.5 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde… | — |
|
2026-10-14 |
| CVE-2026-92154 | HIGH | 8.1 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde… | — |
|
2026-10-14 |
| CVE-2026-92150 | HIGH | 7.5 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde… | — |
|
2026-10-14 |
| CVE-2026-88164 | HIGH | 8.8 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privil… | — |
|
2026-10-14 |
| CVE-2026-86848 | HIGH | 8.8 | A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a g… | — |
|
2026-10-14 |
| CVE-2026-86567 | HIGH | 8.8 | A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IO… | — |
|
2026-10-14 |
| CVE-2026-86461 | HIGH | 8.8 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload i… | — |
|
2026-10-14 |
| CVE-2026-79957 | HIGH | 8.1 | ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endp… | — |
|
2026-10-14 |
| CVE-2026-54554 | HIGH | 7.5 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.… | — |
|
2026-10-14 |
| CVE-2026-109527 | HIGH | 7.5 | The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers … |
T1078
T1548
|
|
2026-10-14 |
| CVE-2026-108484 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-14 |
| CVE-2026-108483 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-14 |
| CVE-2026-108480 | HIGH | 8.2 | Missing Authorization vulnerability in Skydropx Skydropx skydropx allows Exploiting Incorrectly Conf… | — |
|
2026-10-14 |
| CVE-2026-108395 | HIGH | 7.5 | The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and … |
T1078
T1548
|
|
2026-10-14 |
| CVE-2026-107350 | HIGH | 8.8 | Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the pa… | — |
|
2026-10-14 |