CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-102946 | CRITICAL | 9.1 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encry… | — |
|
2026-10-15 |
| CVE-2026-84731 | CRITICAL | 9.8 | An unauthenticated remote attacker can bypass authentication and gain full access to administrative … | — |
|
2026-10-15 |
| CVE-2026-110812 | CRITICAL | 9.9 | Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engin… | — |
|
2026-10-15 |
| CVE-2026-57155 | CRITICAL | 9.9 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Al… | — |
|
2026-10-15 |
| CVE-2026-110958 | CRITICAL | 10.0 | A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown f… | — |
|
2026-10-15 |
| CVE-2026-47168 | CRITICAL | 9.1 | EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authentic… | — |
|
2026-10-15 |
| CVE-2026-110957 | CRITICAL | 10.0 | A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element i… | — |
|
2026-10-15 |
| CVE-2026-99999 | CRITICAL | 9.3 | In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start b… | — |
|
2026-10-15 |
| CVE-2026-109892 | CRITICAL | 9.8 | Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-front… | — |
|
2026-10-15 |
| CVE-2026-109698 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-15 |
| CVE-2026-109688 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-15 |
| CVE-2026-109686 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper a… | — |
|
2026-10-15 |
| CVE-2026-109694 | CRITICAL | 9.8 | Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Priv… | — |
|
2026-10-15 |
| CVE-2026-108497 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-15 |
| CVE-2026-109145 | CRITICAL | 9.8 | The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its… | — |
|
2026-10-15 |
| CVE-2026-101306 | CRITICAL | 9.8 | SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transfe… | — |
|
2026-10-15 |
| CVE-2026-108587 | CRITICAL | 9.8 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is… | — |
|
2026-10-15 |
| CVE-2026-110911 | CRITICAL | 9.8 | Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again … | — |
|
2026-10-15 |
| CVE-2026-110862 | CRITICAL | 9.1 | Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that all… | — |
|
2026-10-14 |
| CVE-2026-55684 | CRITICAL | 9.8 | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/soc… | — |
|
2026-10-14 |