CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-47252 | CRITICAL | 9.0 | Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INS… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-54053 | CRITICAL | 9.6 | Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the Z… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-92489 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix skb double-free in xf… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-90414 | CRITICAL | 9.1 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-90413 | CRITICAL | 9.1 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject login PDUs dec… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-90235 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: xprtsock: annotate shar… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-90230 | CRITICAL | 9.1 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix heap out-of-bounds r… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-90173 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: free completion… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-90151 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entr… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-90110 | CRITICAL | 9.4 | In the Linux kernel, the following vulnerability has been resolved: inetpeer: randomize RB-tree nod… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-90104 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call li… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-86863 | CRITICAL | 9.8 | pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web se… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-63472 | CRITICAL | 9.1 | Vendure is an open-source headless commerce platform. Prior to 3.7.0, ExternalAuthenticationService.… |
T1190
T1059
+1
|
|
2026-09-17 |
| CVE-2026-92960 | CRITICAL | 10.0 | vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: ['*'] configura… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-92957 | CRITICAL | 9.9 | vm2 through 3.11.6 does not normalize `node:`-prefixed builtin specifiers when evaluating user-suppl… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-92956 | CRITICAL | 10.0 | vm2 versions 3.10.1 through 3.11.6 contain a sandbox escape reachable from a default `new VM()` sand… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-92955 | CRITICAL | 10.0 | vm2 before 3.11.8 contains a sandbox escape vulnerability in NodeVM that allows attackers to access … |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-92953 | CRITICAL | 10.0 | vm2 versions from 3.11.0 before 3.11.8 fail to protect host TypedArray and ArrayBuffer prototypes fr… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-92951 | CRITICAL | 9.9 | vm2 before 3.11.7 contains an incorrect authorization vulnerability in the external package allowlis… |
T1190
T1203
|
|
2026-09-17 |
| CVE-2026-92948 | CRITICAL | 9.9 | vm2 versions >= 3.9.6 and <= 3.11.6 are affected by a NodeVM builtin allowlist bypass that permits a… |
T1190
T1203
|
|
2026-09-17 |