CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-80442 | CRITICAL | 9.9 | IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerabili… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-80441 | CRITICAL | 9.8 | IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vul… |
T1190
T1005
+1
|
|
2026-09-18 |
| CVE-2026-75878 | CRITICAL | 9.1 | IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully … |
T1078
T1548
|
|
2026-09-18 |
| CVE-2026-61781 | CRITICAL | 9.9 | pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, … |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-58264 | CRITICAL | 9.8 | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 1.1.2 until 2.5.6… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2023-54399 | CRITICAL | 9.8 | Hongjing e-HR before 8.2 contains a SQL injection vulnerability in the /servlet/codesettree endpoint… |
T1190
T1005
+1
|
|
2026-09-18 |
| CVE-2026-93762 | CRITICAL | 9.8 | Mongoid contains an unsafe reflection weakness in the query path used for embedded documents. An app… |
T1078
T1548
|
|
2026-09-18 |
| CVE-2026-92702 | CRITICAL | 9.1 | Cocos AI is a confidential computing system for running AI workloads inside trusted execution enviro… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-92701 | CRITICAL | 9.1 | trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested … |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-61550 | CRITICAL | 9.8 | Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-59163 | CRITICAL | 9.1 | Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in … |
T1190
T1203
|
|
2026-09-18 |
| CVE-2025-66455 | CRITICAL | 9.8 | LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in ver… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-93765 | CRITICAL | 9.1 | Mongoid contains an unsafe reflection weakness in the document persistence layer of its object-docum… |
T1078
T1548
|
|
2026-09-18 |
| CVE-2026-85497 | CRITICAL | 9.8 | CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password has… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-81321 | CRITICAL | 9.8 | CM2507 IP cameras store configured wireless network credentials in cleartext within the device files… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-77240 | CRITICAL | 9.9 | WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, the profiles_updat… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-84383 | CRITICAL | 9.8 | libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-75031 | CRITICAL | 9.8 | In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was fou… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-61682 | CRITICAL | 9.9 | kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and containe… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-10858 | CRITICAL | 9.9 | IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denia… |
T1190
T1059
+1
|
|
2026-09-18 |