CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-107700 | CRITICAL | 9.8 | dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers … | — |
|
2026-10-08 |
| CVE-2026-107699 | CRITICAL | 9.8 | ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execut… |
T1190
T1203
|
|
2026-10-08 |
| CVE-2026-95210 | CRITICAL | 9.1 | Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates cont… | — |
|
2026-10-08 |
| CVE-2026-88647 | CRITICAL | 9.1 | A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fall… |
T1190
T1203
|
|
2026-10-08 |
| CVE-2026-9209 | CRITICAL | 9.8 | mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Logi… | — |
|
2026-10-08 |
| CVE-2026-93034 | CRITICAL | 9.8 | SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder uncondit… | — |
|
2026-10-08 |
| CVE-2026-14992 | CRITICAL | 9.8 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,… | — |
|
2026-10-08 |
| CVE-2026-14502 | CRITICAL | 9.8 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,… | — |
|
2026-10-08 |
| CVE-2026-14269 | CRITICAL | 9.8 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,… |
T1190
T1059
+1
|
|
2026-10-08 |
| CVE-2026-107640 | CRITICAL | 9.1 | Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/use… | — |
|
2026-10-08 |
| CVE-2026-15762 | CRITICAL | 9.8 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,… |
T1190
T1059
+1
|
|
2026-10-08 |
| CVE-2026-14991 | CRITICAL | 9.8 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,… | — |
|
2026-10-08 |
| CVE-2026-14990 | CRITICAL | 9.3 | IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnera… | — |
|
2026-10-08 |
| CVE-2026-19218 | CRITICAL | 9.1 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Impo… |
T1190
T1203
|
|
2026-10-08 |
| CVE-2026-16340 | CRITICAL | 9.8 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,… | — |
|
2026-10-08 |
| CVE-2026-92555 | CRITICAL | 9.8 | Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Exp… | — |
|
2026-10-08 |
| CVE-2026-107510 | CRITICAL | 9.1 | An authenticated high privilege user can inject arguments in troubleshooting commands resulting in p… | — |
|
2026-10-08 |
| CVE-2026-105110 | CRITICAL | 9.8 | OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an una… | — |
|
2026-10-08 |
| CVE-2026-85097 | CRITICAL | 9.8 | The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versi… | — |
|
2026-10-08 |
| CVE-2026-107459 | CRITICAL | 9.8 | The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated r… | — |
|
2026-10-08 |