CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-110444 | HIGH | 8.8 | TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthentica… | — |
|
2026-10-14 |
| CVE-2026-103422 | HIGH | 7.2 | The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' par… | — |
|
2026-10-14 |
| CVE-2026-102251 | HIGH | 7.5 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection v… | — |
|
2026-10-14 |
| CVE-2026-82715 | HIGH | 7.9 | Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Dr… |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-17092 | HIGH | 8.1 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vu… | — |
|
2026-10-14 |
| CVE-2026-104995 | HIGH | 8.1 | The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, … | — |
|
2026-10-14 |
| CVE-2026-104767 | HIGH | 7.5 | The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnera… | — |
|
2026-10-14 |
| CVE-2026-104749 | HIGH | 7.5 | The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin f… | — |
|
2026-10-14 |
| CVE-2026-103423 | HIGH | 7.5 | The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to… | — |
|
2026-10-14 |
| CVE-2026-110359 | HIGH | 7.8 | Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is c… |
T1068
T1134
|
|
2026-10-14 |
| CVE-2026-92817 | HIGH | 8.8 | The Ignition Perspective module does not properly validate session privileges when determining Desig… | — |
|
2026-10-14 |
| CVE-2026-95634 | HIGH | 8.6 | CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could… |
T1068
T1134
|
|
2026-10-13 |
| CVE-2026-95633 | HIGH | 7.5 | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerabi… |
T1190
T1203
|
|
2026-10-13 |
| CVE-2026-95632 | HIGH | 7.5 | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerabi… | — |
|
2026-10-13 |
| CVE-2026-94453 | HIGH | 7.5 | Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over … | — |
|
2026-10-13 |
| CVE-2026-77207 | HIGH | 7.5 | Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authent… | — |
|
2026-10-13 |
| CVE-2026-77206 | HIGH | 7.5 | Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for auth… | — |
|
2026-10-13 |
| CVE-2026-110172 | HIGH | 8.8 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute… | — |
|
2026-10-13 |
| CVE-2026-110171 | HIGH | 8.8 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute… | — |
|
2026-10-13 |
| CVE-2026-110169 | HIGH | 8.8 | Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute ar… | — |
|
2026-10-13 |