CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-56834 | HIGH | 7.5 | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dy… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-56833 | HIGH | 7.5 | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dy… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-56832 | HIGH | 8.8 | PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115727 | HIGH | 8.1 | AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115726 | HIGH | 7.8 | Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell c… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115723 | HIGH | 7.4 | Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-112904 | HIGH | 8.7 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stor… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-25716 | HIGH | 7.1 | Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceUserManager) a… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-112838 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-112837 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-23 |
| CVE-2026-112835 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-112359 | HIGH | 7.5 | Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting Incorrect… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-94268 | HIGH | 8.1 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extend… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-94262 | HIGH | 8.1 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extend… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-113500 | HIGH | 7.5 | The LiteSpeed Cache WordPress plugin before 7.9.2 does not limit one of its HTML optimization routin… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-113499 | HIGH | 7.5 | The LiteSpeed Cache WordPress plugin before 7.9.2 does not restrict one of its HTML rewriting routin… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-111982 | HIGH | 7.2 | The User Profile Builder WordPress plugin before 4.0.5 does not verify that a user is authorized to… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-109936 | HIGH | 7.5 | The Otter Blocks WordPress plugin before 3.2.8 does not correctly bound a pattern it uses to rewrit… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-115497 | HIGH | 7.5 | The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in a… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-109198 | HIGH | 7.2 | The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to S… |
T1078
T1548
|
|
2026-10-23 |