CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-39746 | CRITICAL | 9.3 | Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions. |
T1190
T1005
+1
|
|
2026-10-06 |
| CVE-2026-32579 | CRITICAL | 10.0 | Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions. |
T1078
T1548
|
|
2026-10-06 |
| CVE-2026-32568 | CRITICAL | 9.9 | Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions. | — |
|
2026-10-06 |
| CVE-2026-32557 | CRITICAL | 9.3 | Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions. | — |
|
2026-10-06 |
| CVE-2026-94293 | CRITICAL | 9.8 | An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH req… | — |
|
2026-10-06 |
| CVE-2026-105778 | CRITICAL | 9.9 | A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unkno… | — |
|
2026-10-06 |
| CVE-2026-105484 | CRITICAL | 10.0 | A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted el… | — |
|
2026-10-06 |
| CVE-2026-82989 | CRITICAL | 9.8 | There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a r… | — |
|
2026-10-06 |
| CVE-2026-105763 | CRITICAL | 9.6 | Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, … | — |
|
2026-10-06 |
| CVE-2026-105740 | CRITICAL | 9.9 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any a… | — |
|
2026-10-05 |
| CVE-2026-105697 | CRITICAL | 9.9 | Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.… | — |
|
2026-10-05 |
| CVE-2026-105691 | CRITICAL | 9.9 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places a… | — |
|
2026-10-05 |
| CVE-2026-97283 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager adva… | — |
|
2026-10-05 |
| CVE-2026-88424 | CRITICAL | 9.8 | FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter… | — |
|
2026-10-05 |
| CVE-2026-105641 | CRITICAL | 9.8 | Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and … | — |
|
2026-10-05 |
| CVE-2026-105640 | CRITICAL | 9.1 | Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses return… | — |
|
2026-10-05 |
| CVE-2026-105639 | CRITICAL | 9.8 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logge… | — |
|
2026-10-05 |
| CVE-2026-105638 | CRITICAL | 9.1 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login uses… | — |
|
2026-10-05 |
| CVE-2026-105637 | CRITICAL | 9.6 | Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in ap… | — |
|
2026-10-05 |
| CVE-2026-105636 | CRITICAL | 9.9 | Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/a… | — |
|
2026-10-05 |