CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-108971 | CRITICAL | 9.6 | A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file … | — |
|
2026-10-13 |
| CVE-2026-97229 | CRITICAL | 10.0 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 … | — |
|
2026-10-13 |
| CVE-2026-89111 | CRITICAL | 10.0 | The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applic… |
T1190
T1203
|
|
2026-10-13 |
| CVE-2026-89110 | CRITICAL | 9.9 | SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal fun… | — |
|
2026-10-13 |
| CVE-2026-89108 | CRITICAL | 9.1 | SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundarie… | — |
|
2026-10-13 |
| CVE-2026-89107 | CRITICAL | 9.9 | SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by… | — |
|
2026-10-13 |
| CVE-2026-87689 | CRITICAL | 9.8 | The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::Web… | — |
|
2026-10-13 |
| CVE-2026-96119 | CRITICAL | 9.9 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive informa… | — |
|
2026-10-13 |
| CVE-2026-82110 | CRITICAL | 9.6 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a… | — |
|
2026-10-12 |
| CVE-2026-82103 | CRITICAL | 9.6 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain se… | — |
|
2026-10-12 |
| CVE-2026-82101 | CRITICAL | 9.6 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a d… | — |
|
2026-10-12 |
| CVE-2026-90920 | CRITICAL | 9.8 | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due t… |
T1190
T1059
+1
|
|
2026-10-12 |
| CVE-2026-109566 | CRITICAL | 9.8 | Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows rem… | — |
|
2026-10-12 |
| CVE-2026-108929 | CRITICAL | 9.9 | A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of th… | — |
|
2026-10-12 |
| CVE-2025-71429 | CRITICAL | 9.8 | GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py … |
T1078
T1548
|
|
2026-10-12 |
| CVE-2026-96012 | CRITICAL | 9.9 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attac… |
T1068
T1134
|
|
2026-10-12 |
| CVE-2026-109575 | CRITICAL | 9.8 | In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Serve… |
T1190
T1059
+1
|
|
2026-10-12 |
| CVE-2026-87744 | CRITICAL | 9.1 | A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers t… | — |
|
2026-10-12 |
| CVE-2026-57118 | CRITICAL | 9.8 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the A… | — |
|
2026-10-12 |
| CVE-2026-77366 | CRITICAL | 9.9 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1… | — |
|
2026-10-12 |