CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-77819 | MEDIUM | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbit… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-77817 | MEDIUM | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitiv… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-66912 | NONE | — | Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during HTML repl… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-66911 | NONE | — | Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in em… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62131 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62018 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62017 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62016 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Gamic <= 1.19 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62015 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62014 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62013 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62012 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62011 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62010 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62009 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62008 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62006 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Nuts <= 1.12 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62005 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62004 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Motorix <= 1.11 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-62003 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Mission <= 1.22 versions. |
T1078
T1548
|
|
2026-10-29 |