CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-110690 | HIGH | 7.5 | Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability … | — |
|
2026-10-14 |
| CVE-2026-107870 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-14 |
| CVE-2026-97278 | HIGH | 7.2 | Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injecti… | — |
|
2026-10-14 |
| CVE-2026-82026 | HIGH | 8.8 | Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSoc… | — |
|
2026-10-14 |
| CVE-2026-107867 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-14 |
| CVE-2026-107426 | HIGH | 7.3 | Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams… | — |
|
2026-10-14 |
| CVE-2026-107421 | HIGH | 7.3 | Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-… | — |
|
2026-10-14 |
| CVE-2026-106599 | HIGH | 8.8 | Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object … | — |
|
2026-10-14 |
| CVE-2026-105874 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-14 |
| CVE-2026-76655 | HIGH | 7.5 | A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution | — |
|
2026-10-14 |
| CVE-2026-73798 | HIGH | 8.2 | A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service… | — |
|
2026-10-14 |
| CVE-2026-107431 | HIGH | 7.5 | Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting In… |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-105067 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-14 |
| CVE-2026-104795 | HIGH | 8.8 | The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container… |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-103905 | HIGH | 7.5 | The authentication middleware of the JTL-Shop administration backend processes the plugin safe mode … | — |
|
2026-10-14 |
| CVE-2026-103358 | HIGH | 7.5 | Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template… | — |
|
2026-10-14 |
| CVE-2026-90954 | HIGH | 7.8 | A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred s… | — |
|
2026-10-14 |
| CVE-2026-88829 | HIGH | 7.2 | A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward r… | — |
|
2026-10-14 |
| CVE-2026-86476 | HIGH | 8.4 | A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video … | — |
|
2026-10-14 |
| CVE-2026-73793 | HIGH | 7.9 | HPE NonStop Middleware software has secret key handling and data deserialization vulnerability. | — |
|
2026-10-14 |