CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119333 | HIGH | 7.8 | draw.io Desktop is the official Electron build of draw.io. Prior to 31.5.2, the Windows application … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119332 | HIGH | 8.8 | Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, Fina… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119331 | HIGH | 7.1 | Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3616e5173835f0f4c155ee9700d91 c… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-116249 | HIGH | 8.4 | In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116247 | HIGH | 8.2 | When a server in pgAdmin 4 had no password file, client certificate or client key configured, or the… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116245 | HIGH | 8.2 | libpq looks a connection service up in the service file of the operating-system account running pgAd… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116244 | HIGH | 8.2 | When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin re… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116243 | HIGH | 7.5 | pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their pr… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-116242 | HIGH | 8.2 | pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116239 | HIGH | 8.5 | In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-116238 | HIGH | 8.1 | In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by defa… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-94175 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-78527 | HIGH | 8.8 | Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-73186 | HIGH | 8.8 | Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62331 | HIGH | 8.2 | praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62264 | HIGH | 7.5 | PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and l… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-61854 | HIGH | 8.2 | VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 until 3.3.1, … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-59978 | HIGH | 7.5 | AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the una… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-54855 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-48201 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions. |
T1078
T1548
|
|
2026-10-30 |