CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-86405 | CRITICAL | 9.8 | Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment… | — |
|
2026-10-09 |
| CVE-2026-85531 | CRITICAL | 9.8 | Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment… | — |
|
2026-10-09 |
| CVE-2026-96809 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-09 |
| CVE-2026-96331 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-09 |
| CVE-2026-96330 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-09 |
| CVE-2026-96328 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-09 |
| CVE-2026-96327 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-09 |
| CVE-2026-94503 | CRITICAL | 10.0 | Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Uploa… | — |
|
2026-10-09 |
| CVE-2026-93947 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-09 |
| CVE-2026-107935 | CRITICAL | 9.3 | A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-ta… | — |
|
2026-10-09 |
| CVE-2026-107909 | CRITICAL | 9.1 | A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_… | — |
|
2026-10-09 |
| CVE-2026-107908 | CRITICAL | 9.8 | A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB b… | — |
|
2026-10-09 |
| CVE-2026-7826 | CRITICAL | 9.1 | A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/ser… | — |
|
2026-10-09 |
| CVE-2026-5759 | CRITICAL | 9.8 | A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph … | — |
|
2026-10-09 |
| CVE-2026-96207 | CRITICAL | 10.0 | Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to eleva… |
T1190
T1203
|
|
2026-10-08 |
| CVE-2026-94510 | CRITICAL | 9.9 | Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attack… |
T1190
T1203
|
|
2026-10-08 |
| CVE-2026-88131 | CRITICAL | 9.8 | Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute … |
T1190
T1203
|
|
2026-10-08 |
| CVE-2026-78663 | CRITICAL | 9.1 | The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a clie… | — |
|
2026-10-08 |
| CVE-2026-77900 | CRITICAL | 9.8 | Missing authentication for critical function in Azure App Service allows an unauthorized attacker to… |
T1190
T1203
|
|
2026-10-08 |
| CVE-2026-69435 | CRITICAL | 9.6 | Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a … |
T1190
T1203
|
|
2026-10-08 |