CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116368 | HIGH | 7.3 | A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115748 | HIGH | 8.8 | **UNSUPPORTED WHEN ASSIGNED** Authorization bypass in Apache Vysper, all versions. Apache Vyspe… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115721 | HIGH | 7.5 | **UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vysper; all versions, m… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-112343 | HIGH | 8.1 | Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authentic… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-90885 | HIGH | 7.5 | Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component.… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-116339 | HIGH | 7.3 | A vulnerability was determined in iFlytek astron-agent up to 1.1.2. This affects an unknown function… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-112345 | HIGH | 8.1 | TTLock Android application before v9.8.260718 and associated smart-lock firmware contain a hardcoded… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116219 | HIGH | 7.2 | Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116218 | HIGH | 7.6 | Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authentica… |
T1190
T1005
+1
|
|
2026-10-26 |
| CVE-2026-115193 | HIGH | 8.2 | A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7. Val… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115192 | HIGH | 7.1 | An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}). … |
T1190
T1005
+1
|
|
2026-10-26 |
| CVE-2026-115191 | HIGH | 7.1 | A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration … |
T1190
T1005
+1
|
|
2026-10-26 |
| CVE-2026-115190 | HIGH | 8.0 | An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segm… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-115189 | HIGH | 8.8 | A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic.… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-94380 | HIGH | 8.1 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS all… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116260 | HIGH | 7.3 | A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function serv… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115717 | HIGH | 7.7 | Frappe Builder versions before 1.36.1 contain a server-side request forgery vulnerability in the con… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-116257 | HIGH | 7.3 | A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116256 | HIGH | 7.3 | A vulnerability was found in geesondog RhaPHP up to 7ae639ccf8dcb627faace096d030bd4cb4cfb905. Affect… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115948 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-26 |