CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-92288 | CRITICAL | 9.1 | Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow u… | — |
|
2026-09-25 |
| CVE-2026-97230 | CRITICAL | 9.8 | IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code … | — |
|
2026-09-24 |
| CVE-2026-95699 | CRITICAL | 9.6 | Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users acce… |
T1190
T1203
|
|
2026-09-24 |
| CVE-2026-93291 | CRITICAL | 9.4 | Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-m… |
T1190
T1059
+1
|
|
2026-09-24 |
| CVE-2026-13249 | CRITICAL | 9.8 | An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web manageme… | — |
|
2026-09-24 |
| CVE-2026-61741 | CRITICAL | 9.3 | http4s-scala-xml provides `EntityDecoder[F, scala.xml.Elem]` instances that parse XML message bodies… | — |
|
2026-09-24 |
| CVE-2026-61732 | CRITICAL | 10.0 | Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl res… | — |
|
2026-09-24 |
| CVE-2026-97413 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer unde… |
T1190
T1059
+1
|
|
2026-09-24 |
| CVE-2026-79766 | CRITICAL | 9.1 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa… | — |
|
2026-09-24 |
| CVE-2026-93425 | CRITICAL | 9.9 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the patch.readRepoD… | — |
|
2026-09-24 |
| CVE-2026-93228 | CRITICAL | 9.1 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chu… | — |
|
2026-09-24 |
| CVE-2026-93207 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Zero rpc_gss_wire_cred … | — |
|
2026-09-24 |
| CVE-2026-88351 | CRITICAL | 9.8 | An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. W… |
T1190
T1059
+1
|
|
2026-09-24 |
| CVE-2026-81549 | CRITICAL | 9.6 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain se… | — |
|
2026-09-24 |
| CVE-2026-51994 | CRITICAL | 9.1 | mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via t… |
T1190
T1059
+1
|
|
2026-09-24 |
| CVE-2026-97360 | CRITICAL | 10.0 | HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary file access vulnerability that … | — |
|
2026-09-24 |
| CVE-2026-97359 | CRITICAL | 10.0 | HFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart upload h… | — |
|
2026-09-24 |
| CVE-2026-19072 | CRITICAL | 9.9 | Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the … |
T1190
T1203
|
|
2026-09-24 |
| CVE-2026-12227 | CRITICAL | 9.8 | The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in al… | — |
|
2026-09-24 |
| CVE-2026-78312 | CRITICAL | 9.1 | Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. | — |
|
2026-09-24 |