CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-10136 | CRITICAL | 9.1 | A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (v… |
T1190
T1059
+1
|
|
2026-10-20 |
| CVE-2026-10135 | CRITICAL | 9.1 | A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOT… |
T1190
T1203
|
|
2026-10-20 |
| CVE-2026-10133 | CRITICAL | 9.1 | A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(… |
T1190
T1059
+1
|
|
2026-10-20 |
| CVE-2026-10132 | CRITICAL | 9.1 | A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R … |
T1190
T1059
+1
|
|
2026-10-20 |
| CVE-2026-10131 | CRITICAL | 9.1 | An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (v… |
T1190
T1203
|
|
2026-10-20 |
| CVE-2026-112380 | CRITICAL | 9.9 | Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a… | — |
|
2026-10-20 |
| CVE-2026-113709 | CRITICAL | 9.9 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3… | — |
|
2026-10-20 |
| CVE-2026-113708 | CRITICAL | 9.9 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3… | — |
|
2026-10-20 |
| CVE-2026-113802 | CRITICAL | 9.8 | Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability… | — |
|
2026-10-20 |
| CVE-2026-113672 | CRITICAL | 9.9 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3… | — |
|
2026-10-20 |
| CVE-2026-113506 | CRITICAL | 9.9 | A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShe… | — |
|
2026-10-20 |
| CVE-2026-113703 | CRITICAL | 9.3 | SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authenti… | — |
|
2026-10-20 |
| CVE-2026-113678 | CRITICAL | 9.9 | Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStat… | — |
|
2026-10-20 |
| CVE-2026-103119 | CRITICAL | 9.1 | Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result … | — |
|
2026-10-20 |
| CVE-2026-101356 | CRITICAL | 9.1 | Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of … | — |
|
2026-10-20 |
| CVE-2026-113620 | CRITICAL | 9.8 | In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec an… | — |
|
2026-10-20 |
| CVE-2026-113391 | CRITICAL | 9.9 | A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function… | — |
|
2026-10-20 |
| CVE-2026-113390 | CRITICAL | 9.9 | A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the func… | — |
|
2026-10-20 |
| CVE-2026-113389 | CRITICAL | 9.9 | A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerabil… | — |
|
2026-10-20 |
| CVE-2026-105312 | CRITICAL | 9.9 | A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.s… | — |
|
2026-10-20 |