CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-90910 | CRITICAL | 9.8 | Missing authentication for critical function vulnerability in Apache Answer. This issue affects A… | — |
|
2026-10-19 |
| CVE-2026-111406 | CRITICAL | 9.9 | Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG… | — |
|
2026-10-19 |
| CVE-2026-110887 | CRITICAL | 9.9 | Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivep… | — |
|
2026-10-19 |
| CVE-2026-108983 | CRITICAL | 9.8 | A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe . | — |
|
2026-10-19 |
| CVE-2026-111998 | CRITICAL | 9.8 | Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated r… |
T1078
T1548
|
|
2026-10-18 |
| CVE-2026-110886 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot con… | — |
|
2026-10-18 |
| CVE-2026-110372 | CRITICAL | 9.8 | Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privile… | — |
|
2026-10-18 |
| CVE-2026-109894 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-18 |
| CVE-2026-111911 | CRITICAL | 9.8 | phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registrat… | — |
|
2026-10-17 |
| CVE-2026-104736 | CRITICAL | 9.8 | The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and inc… | — |
|
2026-10-17 |
| CVE-2026-110653 | CRITICAL | 9.1 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPres… | — |
|
2026-10-17 |
| CVE-2026-111823 | CRITICAL | 9.8 | Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknow… |
T1190
T1203
|
|
2026-10-17 |
| CVE-2026-102608 | CRITICAL | 9.0 | ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, d… | — |
|
2026-10-16 |
| CVE-2026-111711 | CRITICAL | 9.8 | Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the… | — |
|
2026-10-16 |
| CVE-2026-111708 | CRITICAL | 9.8 | WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allo… | — |
|
2026-10-16 |
| CVE-2026-111704 | CRITICAL | 9.8 | LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthen… | — |
|
2026-10-16 |
| CVE-2026-111693 | CRITICAL | 9.8 | DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allo… | — |
|
2026-10-16 |
| CVE-2026-111692 | CRITICAL | 9.8 | DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unaut… | — |
|
2026-10-16 |
| CVE-2026-111690 | CRITICAL | 9.8 | Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthen… | — |
|
2026-10-16 |
| CVE-2026-111687 | CRITICAL | 9.8 | WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthent… | — |
|
2026-10-16 |