CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-89071 | HIGH | 7.5 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability i… | — |
|
2026-10-14 |
| CVE-2026-89070 | HIGH | 7.5 | Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). Th… | — |
|
2026-10-14 |
| CVE-2026-89069 | HIGH | 8.0 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i… | — |
|
2026-10-14 |
| CVE-2026-89068 | HIGH | 8.1 | Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). Th… |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-89067 | HIGH | 8.8 | Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. … | — |
|
2026-10-14 |
| CVE-2026-87093 | HIGH | 8.8 | Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. Th… | — |
|
2026-10-14 |
| CVE-2026-53615 | HIGH | 8.0 | util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended(… | — |
|
2026-10-14 |
| CVE-2026-53614 | HIGH | 7.0 | util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 t… | — |
|
2026-10-14 |
| CVE-2026-110719 | HIGH | 7.2 | Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that a… | — |
|
2026-10-14 |
| CVE-2026-103929 | HIGH | 7.8 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default n… | — |
|
2026-10-14 |
| CVE-2026-102695 | HIGH | 8.2 | OmniFaces is a utility library for Faces. In OmniFaces versions before 1.14.3, 2.7.33, 3.14.23, 4.7.… |
T1190
T1059
+1
|
|
2026-10-14 |
| CVE-2026-97205 | HIGH | 8.1 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When async… | — |
|
2026-10-14 |
| CVE-2026-94197 | HIGH | 7.5 | An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Contr… | — |
|
2026-10-14 |
| CVE-2026-93479 | HIGH | 8.1 | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching … | — |
|
2026-10-14 |
| CVE-2026-91184 | HIGH | 8.8 | Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec… | — |
|
2026-10-14 |
| CVE-2026-71184 | HIGH | 8.8 | Gitea's pull request review notifier does not attach the pull request to the Actions notification, s… | — |
|
2026-10-14 |
| CVE-2026-66877 | HIGH | 8.1 | Gitea enforces first-time fork contributor approval by blocking jobs, but some job transition and di… | — |
|
2026-10-14 |
| CVE-2026-53613 | HIGH | 7.0 | util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 thr… |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-53612 | HIGH | 7.0 | util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 thr… |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-15176 | HIGH | 8.1 | A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses t… | — |
|
2026-10-14 |