CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115612 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-115609 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-115607 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-115606 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-115596 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-115593 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-115591 | HIGH | 7.5 | Insertion of Sensitive Information Into Sent Data vulnerability in Supsystic Contact Form by Supsyst… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-111850 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-111411 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-81472 | MEDIUM | 4.2 | Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDR… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118485 | HIGH | 8.1 | Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the o… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118477 | CRITICAL | 9.8 | The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-116855 | MEDIUM | 5.4 | Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-114278 | CRITICAL | 9.8 | The che-machine-exec service constructs a shell command by concatenating user-controlled input (the … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-102799 | NONE | — | Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-102790 | NONE | — | Joomla Extension - icagenda.com - Stored XSS via url-type event Custom Field in iCagenda 3.2.1 to 4… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-99216 | NONE | — | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-99215 | NONE | — | In the Linux kernel, the following vulnerability has been resolved: power: supply: core: prevent un… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-99214 | NONE | — | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-99213 | NONE | — | In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as onc… |
T1190
T1059
+1
|
|
2026-10-28 |