CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-96755 | CRITICAL | 9.8 | orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect gen… |
T1190
T1203
|
|
2026-09-23 |
| CVE-2026-96754 | CRITICAL | 9.8 | orval versions before 8.29.0 contain a code injection vulnerability in the @orval/hono generator tha… | — |
|
2026-09-23 |
| CVE-2026-85724 | CRITICAL | 9.6 | Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when pattern-based ACL rules are config… | — |
|
2026-09-23 |
| CVE-2025-63564 | CRITICAL | 9.8 | SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to ex… | — |
|
2026-09-23 |
| CVE-2026-18872 | CRITICAL | 9.3 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scri… |
T1190
T1203
|
|
2026-09-23 |
| CVE-2026-96276 | CRITICAL | 9.8 | If a malicious SDK container declares an extension point with a crafted `directory` path, and a deve… |
T1190
T1203
|
|
2026-09-23 |
| CVE-2026-96560 | CRITICAL | 9.8 | LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when… |
T1190
T1059
+1
|
|
2026-09-23 |
| CVE-2026-86708 | CRITICAL | 10.0 | ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of … |
T1190
T1059
+1
|
|
2026-09-23 |
| CVE-2026-59167 | CRITICAL | 10.0 | SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. P… | — |
|
2026-09-23 |
| CVE-2026-86246 | CRITICAL | 9.1 | Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled … |
T1190
T1059
+1
|
|
2026-09-23 |
| CVE-2026-19599 | CRITICAL | 9.9 | ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Exe… |
T1190
T1059
+1
|
|
2026-09-23 |
| CVE-2026-86350 | CRITICAL | 9.1 | Inconsistent interpretation of HTTP/2 requests ('HTTP Request/Response smuggling') vulnerability in … |
T1190
T1203
|
|
2026-09-23 |
| CVE-2026-86248 | CRITICAL | 9.8 | CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled v… |
T1190
T1203
|
|
2026-09-23 |
| CVE-2026-76183 | CRITICAL | 9.8 | Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constrai… |
T1078
T1548
|
|
2026-09-23 |
| CVE-2026-82331 | CRITICAL | 9.8 | Improper link resolution before file access ('link following') vulnerability in the `tar` source plu… |
T1190
T1059
+1
|
|
2026-09-23 |
| CVE-2026-82843 | CRITICAL | 9.0 | The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.4.0 does not bind the OpenID … |
T1190
T1203
|
|
2026-09-23 |
| CVE-2026-75799 | CRITICAL | 9.0 | The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it … |
T1190
T1059
+1
|
|
2026-09-23 |
| CVE-2026-96257 | CRITICAL | 10.0 | A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function… |
T1190
T1059
+1
|
|
2026-09-23 |
| CVE-2026-18169 | CRITICAL | 9.9 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta… |
T1190
T1203
|
|
2026-09-22 |
| CVE-2026-18163 | CRITICAL | 9.8 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execut… |
T1190
T1059
+1
|
|
2026-09-22 |