CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111673 | CRITICAL | 9.8 | IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated att… | — |
|
2026-10-16 |
| CVE-2026-111643 | CRITICAL | 9.8 | Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauth… | — |
|
2026-10-16 |
| CVE-2026-111641 | CRITICAL | 9.8 | FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated… | — |
|
2026-10-16 |
| CVE-2026-111626 | CRITICAL | 9.8 | Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauth… | — |
|
2026-10-16 |
| CVE-2026-92262 | CRITICAL | 9.9 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1… | — |
|
2026-10-16 |
| CVE-2026-85748 | CRITICAL | 9.9 | MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, S… | — |
|
2026-10-16 |
| CVE-2026-85746 | CRITICAL | 9.9 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1… | — |
|
2026-10-16 |
| CVE-2026-57169 | CRITICAL | 9.6 | Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endp… | — |
|
2026-10-16 |
| CVE-2026-49868 | CRITICAL | 9.8 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and … | — |
|
2026-10-16 |
| CVE-2026-102693 | CRITICAL | 9.6 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and … | — |
|
2026-10-16 |
| CVE-2026-102692 | CRITICAL | 9.1 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and … | — |
|
2026-10-16 |
| CVE-2026-44977 | CRITICAL | 9.0 | countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 a… | — |
|
2026-10-16 |
| CVE-2026-97851 | CRITICAL | 9.1 | The storage status-change REST service allows location records still associated with DICOM instances… | — |
|
2026-10-16 |
| CVE-2026-95182 | CRITICAL | 10.0 | An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbit… | — |
|
2026-10-16 |
| CVE-2026-105279 | CRITICAL | 9.1 | In the default configuration, the archive accepts DICOM associations from an unregistered calling AE… | — |
|
2026-10-16 |
| CVE-2026-18516 | CRITICAL | 9.6 | An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, u… | — |
|
2026-10-16 |
| CVE-2026-107617 | CRITICAL | 9.8 | An attacker can use a hard-coded credential to log in to EseeCloud devices. | — |
|
2026-10-16 |
| CVE-2026-94388 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-16 |
| CVE-2026-94169 | CRITICAL | 10.0 | Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-gr… | — |
|
2026-10-16 |
| CVE-2026-104730 | CRITICAL | 9.8 | The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPre… | — |
|
2026-10-16 |