CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-97854 | CRITICAL | 9.8 | Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vu… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115964 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-115245 | CRITICAL | 9.8 | The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, r… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-113617 | CRITICAL | 9.9 | The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplie… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-113616 | CRITICAL | 9.8 | The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code t… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-103693 | CRITICAL | 9.0 | The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 d… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-42922 | CRITICAL | 9.8 | A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-109516 | CRITICAL | 9.8 | The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass lead… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118579 | CRITICAL | 9.8 | A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-61567 | CRITICAL | 10.0 | AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLi… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-61564 | CRITICAL | 10.0 | AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118690 | CRITICAL | 9.8 | Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenti… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-63190 | CRITICAL | 9.4 | FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-117574 | CRITICAL | 9.1 | A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-103409 | CRITICAL | 9.8 | A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Route… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-103406 | CRITICAL | 9.8 | An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedP… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-44179 | CRITICAL | 9.9 | XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Conf… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-115968 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in Ultimate Member Ultimate Member ultimate-member a… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-67074 | CRITICAL | 9.1 | HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to exec… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-115904 | CRITICAL | 9.6 | Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior t… |
T1190
T1059
+1
|
|
2026-10-28 |