CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-61728 | CRITICAL | 9.9 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations nee… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119660 | CRITICAL | 9.8 | MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated att… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-112905 | CRITICAL | 9.0 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stor… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-110799 | CRITICAL | 9.8 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stor… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119597 | CRITICAL | 9.8 | OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthent… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2025-31704 | CRITICAL | 9.8 | A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could s… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-103039 | CRITICAL | 9.8 | The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107249 | CRITICAL | 9.8 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119263 | CRITICAL | 9.6 | Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote atta… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119261 | CRITICAL | 9.6 | Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-61707 | CRITICAL | 9.0 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations nee… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-61645 | CRITICAL | 9.1 | Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbit… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118762 | CRITICAL | 9.3 | Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/f… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107060 | CRITICAL | 9.1 | Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitr… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107058 | CRITICAL | 9.8 | An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a ta… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-93680 | CRITICAL | 9.8 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions … |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-90868 | CRITICAL | 9.9 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-90866 | CRITICAL | 9.1 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 202… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-90865 | CRITICAL | 9.0 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-90864 | CRITICAL | 9.1 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 202… |
T1190
T1203
|
|
2026-10-29 |