CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111255 | HIGH | 7.5 | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vul… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-97019 | HIGH | 7.2 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Sc… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118378 | HIGH | 7.8 | Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-118377 | HIGH | 7.5 | mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability that… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118375 | HIGH | 8.1 | llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA tra… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-117609 | HIGH | 7.1 | rtl_433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2_mc() that al… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-117607 | HIGH | 7.2 | Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows auth… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111314 | HIGH | 7.2 | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vul… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-109999 | HIGH | 7.2 | The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automa… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2015-20129 | HIGH | 8.8 | CrushFTP before 7.3.0 contains a cross-site request forgery vulnerability that allows attackers to p… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2014-125138 | HIGH | 8.8 | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 cont… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2013-20007 | HIGH | 7.2 | Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authentic… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-110747 | HIGH | 7.5 | ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry's string key into an… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-104895 | HIGH | 7.5 | The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken fro… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-104016 | HIGH | 7.5 | ProtobufParser parses length-prefixed protobuf string and bytes fields by checking (_inputPtr + len)… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-41709 | HIGH | — | Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious acto… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-46300 | HIGH | — | Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unin… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-59158 | HIGH | 7.5 | Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications. Prior to 1.3.1… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-58257 | HIGH | 7.2 | GRR is a resource management and reservation application. Prior to the advisory-reported fixed versi… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-58255 | HIGH | 8.8 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.12… |
T1190
T1203
|
|
2026-10-27 |