CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-93029 | CRITICAL | 9.0 | There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts in… | — |
|
2026-10-02 |
| CVE-2026-15896 | CRITICAL | 9.1 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal… | — |
|
2026-10-02 |
| CVE-2026-19660 | CRITICAL | 9.8 | The Divi Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up t… | — |
|
2026-10-02 |
| CVE-2026-14378 | CRITICAL | 9.8 | The DevKit Pro plugin for WordPress is vulnerable to Authentication Bypass Leading to Administrator … | — |
|
2026-10-02 |
| CVE-2026-86345 | CRITICAL | 9.0 | A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a… | — |
|
2026-10-02 |
| CVE-2026-103765 | CRITICAL | 9.4 | Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the HTTP metadata s… | — |
|
2026-10-02 |
| CVE-2026-103764 | CRITICAL | 9.8 | Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::r… | — |
|
2026-10-02 |
| CVE-2026-56662 | CRITICAL | 9.6 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of… | — |
|
2026-10-01 |
| CVE-2026-56660 | CRITICAL | 9.1 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of… | — |
|
2026-10-01 |
| CVE-2026-53953 | CRITICAL | 9.1 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of… | — |
|
2026-10-01 |
| CVE-2026-104286 | CRITICAL | 9.8 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in F… | — |
|
2026-10-01 |
| CVE-2026-102628 | CRITICAL | 9.3 | The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=tru… | — |
|
2026-10-01 |
| CVE-2026-55083 | CRITICAL | 9.1 | DHIS2 is a flexible information system for data capture, management, validation, analytics and visua… | — |
|
2026-10-01 |
| CVE-2026-103922 | CRITICAL | 9.3 | Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.… | — |
|
2026-10-01 |
| CVE-2026-96659 | CRITICAL | 9.1 | A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer p… | — |
|
2026-10-01 |
| CVE-2026-96658 | CRITICAL | 9.9 | A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote… | — |
|
2026-10-01 |
| CVE-2026-59797 | CRITICAL | 9.8 | Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-… | — |
|
2026-10-01 |
| CVE-2026-57941 | CRITICAL | 9.8 | Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy… | — |
|
2026-10-01 |
| CVE-2026-56154 | CRITICAL | 9.8 | Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:.… |
T1190
T1203
|
|
2026-10-01 |
| CVE-2026-12627 | CRITICAL | 9.8 | Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability … | — |
|
2026-10-01 |