CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-107127 | HIGH | 7.5 | The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validate the origin of a pa… | — |
|
2026-10-21 |
| CVE-2026-105262 | HIGH | 8.0 | The Falang multilanguage for WordPress plugin before 1.4.6 does not perform a capability check when … | — |
|
2026-10-21 |
| CVE-2026-102499 | HIGH | 7.7 | The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress … | — |
|
2026-10-21 |
| CVE-2026-82814 | HIGH | 8.8 | The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in al… | — |
|
2026-10-21 |
| CVE-2026-114109 | HIGH | 8.8 | uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write file… | — |
|
2026-10-21 |
| CVE-2026-114107 | HIGH | 8.8 | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that … | — |
|
2026-10-21 |
| CVE-2026-114106 | HIGH | 7.5 | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remot… | — |
|
2026-10-21 |
| CVE-2026-114102 | HIGH | 7.5 | adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attacker… | — |
|
2026-10-21 |
| CVE-2026-114098 | HIGH | 7.8 | Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() that allo… | — |
|
2026-10-21 |
| CVE-2026-114097 | HIGH | 7.8 | Dulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter._apply_inde… | — |
|
2026-10-21 |
| CVE-2026-114096 | HIGH | 7.8 | Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkout(pa… | — |
|
2026-10-21 |
| CVE-2026-114094 | HIGH | 8.8 | Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Window… | — |
|
2026-10-21 |
| CVE-2026-114090 | HIGH | 7.1 | Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the tr… | — |
|
2026-10-21 |
| CVE-2026-114089 | HIGH | 8.8 | Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorizatio… | — |
|
2026-10-21 |
| CVE-2026-114087 | HIGH | 8.1 | Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosti… | — |
|
2026-10-21 |
| CVE-2026-114085 | HIGH | 7.9 | Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload… | — |
|
2026-10-21 |
| CVE-2026-114084 | HIGH | 7.7 | Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs endpoint, … | — |
|
2026-10-21 |
| CVE-2026-114083 | HIGH | 8.1 | Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/… | — |
|
2026-10-21 |
| CVE-2026-114082 | HIGH | 8.1 | Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders wi… | — |
|
2026-10-21 |
| CVE-2026-114081 | HIGH | 7.7 | Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler, which c… | — |
|
2026-10-21 |