CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-100133 | CRITICAL | 9.3 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused… | — |
|
2026-10-13 |
| CVE-2026-92892 | CRITICAL | 9.0 | Potential arbitrary code execution, under specific configurations. | — |
|
2026-10-13 |
| CVE-2026-52394 | CRITICAL | 9.1 | DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input. | — |
|
2026-10-13 |
| CVE-2026-37107 | CRITICAL | 9.8 | An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function … | — |
|
2026-10-13 |
| CVE-2026-106173 | CRITICAL | 9.8 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fo… | — |
|
2026-10-13 |
| CVE-2026-94603 | CRITICAL | 10.0 | Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run … |
T1190
T1203
|
|
2026-10-13 |
| CVE-2026-78799 | CRITICAL | 9.8 | Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 En… | — |
|
2026-10-13 |
| CVE-2026-77459 | CRITICAL | 9.9 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, … | — |
|
2026-10-13 |
| CVE-2026-69227 | CRITICAL | 9.8 | A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endp… | — |
|
2026-10-13 |
| CVE-2026-55562 | CRITICAL | 9.0 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.11… | — |
|
2026-10-13 |
| CVE-2026-55183 | CRITICAL | 9.6 | RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes effi… | — |
|
2026-10-13 |
| CVE-2026-54454 | CRITICAL | 9.1 | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and h… | — |
|
2026-10-13 |
| CVE-2026-110116 | CRITICAL | 9.1 | Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in t… | — |
|
2026-10-13 |
| CVE-2026-109412 | CRITICAL | 9.9 | An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attac… |
T1190
T1203
|
|
2026-10-13 |
| CVE-2026-106042 | CRITICAL | 9.9 | An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 all… | — |
|
2026-10-13 |
| CVE-2026-102989 | CRITICAL | 9.3 | TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework f… | — |
|
2026-10-13 |
| CVE-2026-78802 | CRITICAL | 9.8 | An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allo… | — |
|
2026-10-13 |
| CVE-2026-55695 | CRITICAL | 9.1 | FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.… | — |
|
2026-10-13 |
| CVE-2026-55675 | CRITICAL | 10.0 | The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit … | — |
|
2026-10-13 |
| CVE-2024-34324 | CRITICAL | 9.1 | An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking atta… | — |
|
2026-10-13 |