CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115607 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-111411 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-118477 | CRITICAL | 9.8 | The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-114278 | CRITICAL | 9.8 | The che-machine-exec service constructs a shell command by concatenating user-controlled input (the … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-103799 | CRITICAL | 9.6 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS20… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-103792 | CRITICAL | 9.6 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS20… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-103780 | CRITICAL | 9.8 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-86384 | CRITICAL | 9.8 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-90717 | CRITICAL | 9.1 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS20… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-86400 | CRITICAL | 9.8 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-86397 | CRITICAL | 9.8 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-109218 | CRITICAL | 9.8 | The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up t… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-103688 | CRITICAL | 9.8 | The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded f… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-84999 | CRITICAL | 9.8 | The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-106013 | CRITICAL | 9.8 | The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Soc… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-110879 | CRITICAL | 9.8 | jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected cla… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-58256 | CRITICAL | 9.1 | GRR is a resource management and reservation application. Prior to the advisory-reported fixed versi… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-118355 | CRITICAL | 9.6 | Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attack… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-118342 | CRITICAL | 9.6 | Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to … |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-118340 | CRITICAL | 9.6 | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to poten… |
T1190
T1059
+1
|
|
2026-10-27 |