CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-77936 | CRITICAL | 9.8 | Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password … | — |
|
2026-10-20 |
| CVE-2026-77933 | CRITICAL | 9.8 | DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.ym… | — |
|
2026-10-20 |
| CVE-2026-77932 | CRITICAL | 9.8 | DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /ap… | — |
|
2026-10-20 |
| CVE-2026-75128 | CRITICAL | 9.8 | Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any register… | — |
|
2026-10-20 |
| CVE-2026-109442 | CRITICAL | 9.8 | piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat age… | — |
|
2026-10-20 |
| CVE-2026-109395 | CRITICAL | 9.1 | Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc… | — |
|
2026-10-20 |
| CVE-2026-112371 | CRITICAL | 9.9 | A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the… | — |
|
2026-10-19 |
| CVE-2026-112370 | CRITICAL | 9.9 | A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of t… | — |
|
2026-10-19 |
| CVE-2026-112779 | CRITICAL | 9.8 | Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for ever… | — |
|
2026-10-19 |
| CVE-2026-112776 | CRITICAL | 9.8 | Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-s… | — |
|
2026-10-19 |
| CVE-2026-109437 | CRITICAL | 9.8 | Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defau… | — |
|
2026-10-19 |
| CVE-2026-111862 | CRITICAL | 9.8 | Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.… | — |
|
2026-10-19 |
| CVE-2026-107188 | CRITICAL | 9.6 | A user can upload export reports with any file contents and specify any contents. JSP code can be up… | — |
|
2026-10-19 |
| CVE-2026-107083 | CRITICAL | 9.8 | SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injectio… | — |
|
2026-10-19 |
| CVE-2026-111058 | CRITICAL | 9.8 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prio… | — |
|
2026-10-19 |
| CVE-2026-111057 | CRITICAL | 10.0 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From… | — |
|
2026-10-19 |
| CVE-2026-109432 | CRITICAL | 9.8 | Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerabili… | — |
|
2026-10-19 |
| CVE-2026-112296 | CRITICAL | 9.8 | FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthentica… | — |
|
2026-10-19 |
| CVE-2026-112292 | CRITICAL | 9.8 | CheckCle through 1.6.0 contains a missing authorization vulnerability that allows unauthenticated at… | — |
|
2026-10-19 |
| CVE-2026-71253 | CRITICAL | 9.8 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in … | — |
|
2026-10-19 |