CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-95675 | CRITICAL | 9.8 | D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution … |
T1190
T1059
+1
|
|
2026-09-22 |
| CVE-2026-12718 | CRITICAL | 9.8 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-09-22 |
| CVE-2026-93616 | CRITICAL | 9.8 | A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and… | — |
|
2026-09-22 |
| CVE-2026-74849 | CRITICAL | 9.8 | Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code … |
T1190
T1059
+1
|
|
2026-09-22 |
| CVE-2026-25254 | CRITICAL | 9.8 | Improper authorization leads to Remote Code Execution via SocketIO interface. | — |
|
2026-09-22 |
| CVE-2026-93952 | CRITICAL | 10.0 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attack… | — |
|
2026-09-22 |
| CVE-2026-87080 | CRITICAL | 9.1 | Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing … | — |
|
2026-09-22 |
| CVE-2026-87078 | CRITICAL | 9.1 | Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejecte… | — |
|
2026-09-22 |
| CVE-2016-15059 | CRITICAL | 9.8 | Net::IDN::Punycode versions before 2.301 for Perl allow a heap buffer overflow via unchecked writes … |
T1190
T1059
+1
|
|
2026-09-22 |
| CVE-2026-19658 | CRITICAL | 9.8 | The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, … | — |
|
2026-09-22 |
| CVE-2026-13355 | CRITICAL | 9.8 | The Meta Box AIO plugin for WordPress is vulnerable to Privilege Escalation to Administrator in vers… | — |
|
2026-09-22 |
| CVE-2026-94493 | CRITICAL | 10.0 | A vulnerability was detected in Gigatech PDV5701 1.0.31_240305_112640. This issue affects some unkno… | — |
|
2026-09-22 |
| CVE-2026-78847 | CRITICAL | 9.8 | An issue in gray-matter All versions (verified on 4.0.3) allows the JavaScript engine in lib/engines… | — |
|
2026-09-21 |
| CVE-2026-88404 | CRITICAL | 9.8 | A remote code execution (RCE) vulnerability in the UniscriptExecutionService.execute() function (/se… |
T1190
T1059
+1
|
|
2026-09-21 |
| CVE-2026-88402 | CRITICAL | 9.8 | A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to acces… |
T1190
T1005
+1
|
|
2026-09-21 |
| CVE-2026-79916 | CRITICAL | 9.1 | MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.5-lts, authenticated workspace me… |
T1190
T1059
+1
|
|
2026-09-21 |
| CVE-2026-77521 | CRITICAL | 10.0 | MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a … |
T1190
T1059
+1
|
|
2026-09-21 |
| CVE-2026-58491 | CRITICAL | 9.3 | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpg… | — |
|
2026-09-21 |
| CVE-2026-93012 | CRITICAL | 9.8 | Email::Sender::Transport::Sendmail versions before 2.602 for Perl allow arbitrary command execution … | — |
|
2026-09-21 |
| CVE-2026-79920 | CRITICAL | 9.9 | Ajenti is a Linux & BSD modular server admin panel. Prior to version 2.2.16, any authenticated user … | — |
|
2026-09-21 |