CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-112221 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-21 |
| CVE-2026-111848 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-21 |
| CVE-2026-111840 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-21 |
| CVE-2026-111838 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-21 |
| CVE-2026-111833 | HIGH | 7.5 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bold… | — |
|
2026-10-21 |
| CVE-2026-114249 | HIGH | 7.3 | A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03c… | — |
|
2026-10-21 |
| CVE-2026-109619 | HIGH | 8.1 | PHP has various global state that temporarily points into request memory. In some scenarios, global … | — |
|
2026-10-21 |
| CVE-2026-97313 | HIGH | 7.5 | A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recurs… | — |
|
2026-10-21 |
| CVE-2026-96888 | HIGH | 7.5 | A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may a… | — |
|
2026-10-21 |
| CVE-2026-94300 | HIGH | 8.1 | Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker wh… | — |
|
2026-10-21 |
| CVE-2026-82230 | HIGH | 7.5 | Uncontrolled recursion in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms… | — |
|
2026-10-21 |
| CVE-2026-19630 | HIGH | 7.5 | In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additio… | — |
|
2026-10-21 |
| CVE-2026-114403 | HIGH | 8.1 | PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allo… | — |
|
2026-10-21 |
| CVE-2026-114397 | HIGH | 7.4 | Trudesk through 1.2.11 contains a missing authentication vulnerability in debug routes enabled whene… | — |
|
2026-10-21 |
| CVE-2026-114396 | HIGH | 7.1 | Trudesk through 1.2.11 contains a server-side JavaScript injection vulnerability that allows authent… | — |
|
2026-10-21 |
| CVE-2026-114391 | HIGH | 7.1 | ZenTao PMS before 22.3 contains an authorization bypass vulnerability in commonModel::isOpenMethod()… | — |
|
2026-10-21 |
| CVE-2026-114387 | HIGH | 8.8 | Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-pan… | — |
|
2026-10-21 |
| CVE-2026-114245 | HIGH | 7.3 | A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf0… | — |
|
2026-10-21 |
| CVE-2026-114243 | HIGH | 7.3 | A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e… | — |
|
2026-10-21 |
| CVE-2026-56386 | HIGH | 7.5 | Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allow… | — |
|
2026-10-21 |