CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-114730 | HIGH | 7.2 | Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request f… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-110354 | HIGH | 7.5 | HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persis… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-110353 | HIGH | 7.5 | HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (work… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-96365 | HIGH | 7.5 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessiv… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114727 | HIGH | 8.3 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageM… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114724 | HIGH | 7.4 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcu… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114720 | HIGH | 7.1 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vuln… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114716 | HIGH | 8.5 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulner… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114664 | HIGH | 7.1 | Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doct… |
T1190
T1005
+1
|
|
2026-10-22 |
| CVE-2026-114663 | HIGH | 8.4 | Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from im… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114662 | HIGH | 8.1 | Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114661 | HIGH | 8.5 | OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResou… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114658 | HIGH | 8.8 | Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the log… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114656 | HIGH | 7.5 | Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that allows unauth… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114642 | HIGH | 8.7 | Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114640 | HIGH | 8.7 | Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114639 | HIGH | 8.7 | Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a fi… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114638 | HIGH | 8.7 | Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes In… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114637 | HIGH | 8.7 | Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experiment… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114636 | HIGH | 8.7 | Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX pro… |
T1190
T1059
+1
|
|
2026-10-22 |