CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2024-34323 | CRITICAL | 10.0 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (I… |
T1190
T1203
|
|
2026-10-13 |
| CVE-2024-34320 | CRITICAL | 9.8 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in s… | — |
|
2026-10-13 |
| CVE-2026-53709 | CRITICAL | 9.8 | MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.p… | — |
|
2026-10-13 |
| CVE-2026-104192 | CRITICAL | 9.6 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueOb… | — |
|
2026-10-13 |
| CVE-2026-74043 | CRITICAL | 9.0 | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, upload_r… | — |
|
2026-10-13 |
| CVE-2026-74041 | CRITICAL | 9.1 | Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and… | — |
|
2026-10-13 |
| CVE-2026-74040 | CRITICAL | 9.1 | Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterH… | — |
|
2026-10-13 |
| CVE-2026-65173 | CRITICAL | 9.1 | NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation end… |
T1078
T1548
|
|
2026-10-13 |
| CVE-2026-65162 | CRITICAL | 10.0 | NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initializatio… |
T1068
T1134
|
|
2026-10-13 |
| CVE-2026-109707 | CRITICAL | 9.6 | Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Fi… | — |
|
2026-10-13 |
| CVE-2026-109705 | CRITICAL | 9.6 | Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Net… | — |
|
2026-10-13 |
| CVE-2026-109157 | CRITICAL | 9.9 | A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the func… | — |
|
2026-10-13 |
| CVE-2026-63354 | CRITICAL | 9.6 | Affected devices do not properly validate and sanitize visual marker data contained in imported CSV … | — |
|
2026-10-13 |
| CVE-2026-63353 | CRITICAL | 9.6 | Affected devices do not properly sanitize comment fields contained in imported trace files before re… | — |
|
2026-10-13 |
| CVE-2026-63350 | CRITICAL | 9.6 | Affected devices do not properly restrict executable content contained in imported trace files. T… | — |
|
2026-10-13 |
| CVE-2026-44415 | CRITICAL | 9.1 | Affected systems do not properly restrict access to internal APIs and paths for authenticated users.… | — |
|
2026-10-13 |
| CVE-2026-89309 | CRITICAL | 10.0 | The authorization middleware of the WMS MobileServer fails to require authentication in two distinct… | — |
|
2026-10-13 |
| CVE-2026-109110 | CRITICAL | 10.0 | A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the c… | — |
|
2026-10-13 |
| CVE-2026-109109 | CRITICAL | 10.0 | A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the functio… | — |
|
2026-10-13 |
| CVE-2026-109108 | CRITICAL | 9.9 | A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the functio… |
T1190
T1203
|
|
2026-10-13 |