CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119568 | HIGH | 7.4 | vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allow… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119549 | HIGH | 7.1 | Jellyfin through 12.4 contains a server-side request forgery vulnerability that lets authenticated u… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119426 | HIGH | 7.5 | phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote atta… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119420 | HIGH | 8.8 | Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization adminis… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119419 | HIGH | 8.1 | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119418 | HIGH | 8.1 | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119409 | HIGH | 7.2 | OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users wi… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119408 | HIGH | 8.8 | n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulne… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119407 | HIGH | 7.1 | Element Web and Element Desktop before 1.12.32 accept guest credentials from URL fragment parameters… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119379 | HIGH | 7.8 | SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119374 | HIGH | 7.8 | SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that al… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119373 | HIGH | 7.8 | SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that u… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-111505 | HIGH | 8.8 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-111504 | HIGH | 7.2 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-101214 | HIGH | 7.2 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-101213 | HIGH | 7.8 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulne… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-101210 | HIGH | 7.2 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-59387 | HIGH | 8.8 | The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ … |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-97645 | HIGH | 7.2 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via List Field i… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-90437 | HIGH | 7.2 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Excerpt… |
T1078
T1548
|
|
2026-10-30 |