CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-10747 | CRITICAL | 10.0 | IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute a… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2025-53837 | CRITICAL | 9.9 | XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki sy… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2025-15399 | CRITICAL | 10.0 | IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 … |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-93606 | CRITICAL | 10.0 | vm2 (npm) versions 3.12.0 and earlier contain a sandbox escape in `VM` and `NodeVM`. When an embedde… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-93605 | CRITICAL | 10.0 | vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTIN… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-93603 | CRITICAL | 10.0 | vm2 through 3.12.0 (fixed in 3.12.1) does not correctly handle a nullish `this` receiver in the appl… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-93019 | CRITICAL | 9.1 | Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 327… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-13684 | CRITICAL | 9.8 | An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DS… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-13639 | CRITICAL | 9.8 | An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-67101 | CRITICAL | 9.3 | HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in i… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-67100 | CRITICAL | 9.8 | HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure fla… |
T1190
T1005
+1
|
|
2026-09-18 |
| CVE-2026-84738 | CRITICAL | 9.1 | The AF Companion WordPress plugin before 2.2.0 does not validate the type of files uploaded through… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-93467 | CRITICAL | 9.8 | The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-85878 | CRITICAL | 9.9 | Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate pri… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-69843 | CRITICAL | 10.0 | Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate pri… |
T1078
T1548
|
|
2026-09-18 |
| CVE-2026-62874 | CRITICAL | 10.0 | Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to e… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-87701 | CRITICAL | 9.6 | Improper neutralization of special elements in output used by a downstream component ('injection') i… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-85889 | CRITICAL | 10.0 | Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to … |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-85885 | CRITICAL | 9.9 | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot … |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-83944 | CRITICAL | 10.0 | Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges ov… |
T1190
T1203
|
|
2026-09-17 |