CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-77903 | CRITICAL | 9.0 | Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate … |
T1078
T1548
|
|
2026-09-17 |
| CVE-2026-70200 | CRITICAL | 10.0 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps a… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-70009 | CRITICAL | 9.3 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows a… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-69865 | CRITICAL | 10.0 | Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthori… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-69399 | CRITICAL | 10.0 | Azure Arc Elevation of Privilege Vulnerability |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-54767 | CRITICAL | 9.1 | WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controlle… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-54734 | CRITICAL | 10.0 | Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters in… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-54670 | CRITICAL | 9.1 | WeGIA is a web manager for charitable institutions. Prior to 3.8.5, the contribution request dispatc… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-93374 | CRITICAL | 9.6 | Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attack… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-93373 | CRITICAL | 9.6 | Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to ex… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-93372 | CRITICAL | 9.6 | Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote atta… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-54460 | CRITICAL | 9.8 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking pl… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-45143 | CRITICAL | 9.0 | Chamilo LMS is an open-source learning management system. From 2.0.0 through at least 2.1.0, Chamilo… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-45140 | CRITICAL | 9.8 | Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unau… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2025-55787 | CRITICAL | 9.8 | In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists. |
T1190
T1005
+1
|
|
2026-09-17 |
| CVE-2026-54752 | CRITICAL | 9.6 | NetBox Device Type Library is a collection of community-sourced device type definitions for import i… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-54627 | CRITICAL | 9.8 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata,… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-54626 | CRITICAL | 9.8 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata,… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-54618 | CRITICAL | 9.4 | Obsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize… |
T1078
T1548
|
|
2026-09-17 |
| CVE-2026-54617 | CRITICAL | 9.8 | GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an una… |
T1190
T1059
+1
|
|
2026-09-17 |