CVE Database

29323 results

Reset
All Critical High Medium Low
CVE ID Severity CVSS Description MITRE TTPs Flags Published
CVE-2026-82116 CRITICAL 9.8 Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Serv…
T1190 T1203
2026-10-27
CVE-2026-76939 CRITICAL 9.8 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affec…
T1190 T1059 +1
2026-10-27
CVE-2026-76938 CRITICAL 9.8 Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects J…
T1078 T1548
2026-10-27
CVE-2026-76937 CRITICAL 9.4 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affe…
T1190 T1059 +1
2026-10-27
CVE-2026-76936 CRITICAL 9.4 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue aff…
T1190 T1059 +1
2026-10-27
CVE-2026-76935 CRITICAL 9.4 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue aff…
T1190 T1059 +1
2026-10-27
CVE-2026-76934 CRITICAL 9.8 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affe…
T1190 T1059 +1
2026-10-27
CVE-2026-76933 CRITICAL 9.4 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affec…
T1190 T1059 +1
2026-10-27
CVE-2026-76932 CRITICAL 9.4 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affe…
T1190 T1059 +1
2026-10-27
CVE-2026-117494 NONE — Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API …
T1190 T1203
2026-10-27
CVE-2026-117493 NONE — Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards/<id>/widgets/<id> API accepts…
T1190 T1203
2026-10-27
CVE-2026-107147 NONE — The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoo…
T1078 T1548
2026-10-27
CVE-2026-107146 NONE — The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed …
T1190 T1059 +1
2026-10-27
CVE-2026-107145 NONE — The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-facto…
T1190 T1203
2026-10-27
CVE-2026-102789 NONE — Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < …
T1190 T1203
2026-10-27
CVE-2026-102788 NONE — Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store prod…
T1190 T1005 +1
2026-10-27
CVE-2026-102787 NONE — Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5
T1190 T1203
2026-10-27
CVE-2026-92885 CRITICAL 9.8 The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account T…
T1078 T1548
2026-10-27
CVE-2026-65213 MEDIUM 6.6 This issue may allow an IPMI authenticated administrator to execute commands as the operating system…
T1190 T1203
2026-10-27
CVE-2026-65211 HIGH 7.2 This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical me…
T1190 T1203
2026-10-27