CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-79537 | CRITICAL | 9.1 | metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP tr… | — |
|
2026-09-29 |
| CVE-2026-79536 | CRITICAL | 9.1 | bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-pars… | — |
|
2026-09-29 |
| CVE-2026-76725 | CRITICAL | 9.6 | A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that c… |
T1190
T1059
+1
|
|
2026-09-29 |
| CVE-2026-76724 | CRITICAL | 9.6 | A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that c… |
T1190
T1059
+1
|
|
2026-09-29 |
| CVE-2026-76723 | CRITICAL | 9.6 | Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS tha… |
T1190
T1059
+1
|
|
2026-09-29 |
| CVE-2026-76722 | CRITICAL | 9.8 | Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant… |
T1190
T1059
+1
|
|
2026-09-29 |
| CVE-2026-76721 | CRITICAL | 9.8 | Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that cou… | — |
|
2026-09-29 |
| CVE-2026-53988 | CRITICAL | 10.0 | Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints … | — |
|
2026-09-29 |
| CVE-2026-39117 | CRITICAL | 9.8 | An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allow… | — |
|
2026-09-29 |
| CVE-2026-102331 | CRITICAL | 9.6 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote atta… | — |
|
2026-09-29 |
| CVE-2026-102316 | CRITICAL | 9.6 | Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging… | — |
|
2026-09-29 |
| CVE-2026-102309 | CRITICAL | 9.6 | Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to ex… | — |
|
2026-09-29 |
| CVE-2026-102308 | CRITICAL | 9.6 | Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging… | — |
|
2026-09-29 |
| CVE-2026-102306 | CRITICAL | 9.6 | Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to pot… | — |
|
2026-09-29 |
| CVE-2026-102304 | CRITICAL | 9.6 | Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to exe… | — |
|
2026-09-29 |
| CVE-2026-100291 | CRITICAL | 9.8 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process manageme… | — |
|
2026-09-29 |
| CVE-2026-95357 | CRITICAL | 9.6 | Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote at… | — |
|
2026-09-29 |
| CVE-2026-95356 | CRITICAL | 9.6 | Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker lev… | — |
|
2026-09-29 |
| CVE-2026-95350 | CRITICAL | 9.6 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote atta… | — |
|
2026-09-29 |
| CVE-2026-95349 | CRITICAL | 9.6 | Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote atta… | — |
|
2026-09-29 |