CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-91140 | CRITICAL | 9.6 | An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Prog… | — |
|
2026-10-06 |
| CVE-2026-77178 | CRITICAL | 9.1 | Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host … | — |
|
2026-10-06 |
| CVE-2026-106037 | CRITICAL | 9.8 | Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST serv… | — |
|
2026-10-06 |
| CVE-2026-106016 | CRITICAL | 9.8 | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1. | — |
|
2026-10-06 |
| CVE-2026-98365 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow … | — |
|
2026-10-06 |
| CVE-2026-98323 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Bound fragmented head… | — |
|
2026-10-06 |
| CVE-2026-42417 | CRITICAL | 9.3 | Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions. | — |
|
2026-10-06 |
| CVE-2026-42415 | CRITICAL | 9.3 | Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions. | — |
|
2026-10-06 |
| CVE-2026-41555 | CRITICAL | 9.3 | Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Ema… | — |
|
2026-10-06 |
| CVE-2026-39797 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions. | — |
|
2026-10-06 |
| CVE-2026-39795 | CRITICAL | 9.3 | Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions. | — |
|
2026-10-06 |
| CVE-2026-39785 | CRITICAL | 9.3 | Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions. | — |
|
2026-10-06 |
| CVE-2026-39773 | CRITICAL | 10.0 | Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions. | — |
|
2026-10-06 |
| CVE-2026-39770 | CRITICAL | 10.0 | Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions. | — |
|
2026-10-06 |
| CVE-2026-39764 | CRITICAL | 9.3 | Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <… | — |
|
2026-10-06 |
| CVE-2026-39761 | CRITICAL | 9.8 | Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions. | — |
|
2026-10-06 |
| CVE-2026-39759 | CRITICAL | 9.9 | Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions. | — |
|
2026-10-06 |
| CVE-2026-39757 | CRITICAL | 9.9 | Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions. | — |
|
2026-10-06 |
| CVE-2026-39755 | CRITICAL | 9.9 | Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions. | — |
|
2026-10-06 |
| CVE-2026-39753 | CRITICAL | 9.8 | Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions. | — |
|
2026-10-06 |