CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-61998 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-61997 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-61992 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-61991 | CRITICAL | 10.0 | Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions. |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-54860 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-54859 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Preservation <= 1.15 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-54858 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-54857 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Quirky <= 1.23 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-54856 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-119145 | CRITICAL | 9.9 | Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certa… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-110186 | CRITICAL | 9.8 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-107329 | CRITICAL | 9.9 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitra… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-107328 | CRITICAL | 9.9 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitra… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-107327 | CRITICAL | 9.9 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitra… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-107034 | CRITICAL | 9.1 | Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107032 | CRITICAL | 9.1 | Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized atta… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107028 | CRITICAL | 9.1 | Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-104339 | CRITICAL | 9.8 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-107017 | CRITICAL | 9.1 | Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unau… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107015 | CRITICAL | 9.1 | Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write an… |
T1190
T1203
|
|
2026-10-29 |