CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-104711 | CRITICAL | 9.8 | Improper neutralization of special elements used in an expression language statement ('Expression La… | — |
|
2026-10-05 |
| CVE-2026-103352 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-05 |
| CVE-2026-88395 | CRITICAL | 9.8 | GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords p… | — |
|
2026-10-05 |
| CVE-2026-88393 | CRITICAL | 9.8 | WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/ta… | — |
|
2026-10-05 |
| CVE-2026-37719 | CRITICAL | 9.8 | An issue in dormakaba evolo Service (all versions) allows a remote attacker to execute arbitrary cod… | — |
|
2026-10-05 |
| CVE-2026-88391 | CRITICAL | 9.8 | Northstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but its… | — |
|
2026-10-05 |
| CVE-2026-79820 | CRITICAL | 9.0 | A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware. | — |
|
2026-10-05 |
| CVE-2026-105285 | CRITICAL | 10.0 | A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an… | — |
|
2026-10-05 |
| CVE-2026-105284 | CRITICAL | 10.0 | A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the… | — |
|
2026-10-05 |
| CVE-2017-20285 | CRITICAL | 9.1 | YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrar… |
T1190
T1203
|
|
2026-10-05 |
| CVE-2026-105215 | CRITICAL | 9.1 | ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1… | — |
|
2026-10-04 |
| CVE-2026-105209 | CRITICAL | 9.6 | ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: wh… | — |
|
2026-10-04 |
| CVE-2026-105207 | CRITICAL | 9.8 | ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and externa… | — |
|
2026-10-04 |
| CVE-2026-103355 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-04 |
| CVE-2026-105135 | CRITICAL | 10.0 | A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function Executi… | — |
|
2026-10-04 |
| CVE-2026-105134 | CRITICAL | 10.0 | A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the… | — |
|
2026-10-04 |
| CVE-2026-105105 | CRITICAL | 9.8 | CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command b… | — |
|
2026-10-03 |
| CVE-2026-92084 | CRITICAL | 9.1 | The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerab… | — |
|
2026-10-03 |
| CVE-2026-87115 | CRITICAL | 9.1 | The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file d… | — |
|
2026-10-03 |
| CVE-2026-105080 | CRITICAL | 9.9 | In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes the… |
T1190
T1203
|
|
2026-10-03 |