CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2021-48016 | CRITICAL | 9.8 | DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP R… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2021-48014 | CRITICAL | 9.8 | FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_sv… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-112327 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-22 |
| CVE-2026-112241 | CRITICAL | 9.8 | Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authent… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114220 | CRITICAL | 9.1 | NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unaut… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-96355 | CRITICAL | 9.1 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webfor… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114575 | CRITICAL | 10.0 | A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the funct… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-110264 | CRITICAL | 10.0 | An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 b… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-76531 | CRITICAL | 9.9 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-76302 | CRITICAL | 9.9 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-76299 | CRITICAL | 9.9 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-91403 | CRITICAL | 9.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ… |
T1078
T1548
|
|
2026-10-21 |
| CVE-2026-114383 | CRITICAL | 10.0 | A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAd… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-114382 | CRITICAL | 10.0 | A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStat… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-96639 | CRITICAL | 9.8 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an Imag… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-111815 | CRITICAL | 10.0 | Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a clien… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-111814 | CRITICAL | 10.0 | Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authe… |
T1190
T1203
|
|
2026-10-21 |
| CVE-2026-111812 | CRITICAL | 10.0 | Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS… |
T1190
T1059
+1
|
|
2026-10-21 |
| CVE-2026-111811 | CRITICAL | 9.0 | Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, a… |
T1078
T1548
|
|
2026-10-21 |
| CVE-2026-111809 | CRITICAL | 9.3 | Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transf… |
T1190
T1203
|
|
2026-10-21 |