CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-86460 | CRITICAL | 9.8 | Cypher injection vulnerability in the Neo4j persistence layer when processing some FIQL search condi… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-82232 | CRITICAL | 9.8 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-09-14 |
| CVE-2026-90703 | CRITICAL | 9.1 | A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function syste… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-90702 | CRITICAL | 9.1 | A flaw has been found in D-Link DWR-M921 1.1.52. Impacted is the function system of the file /boafrm… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-90699 | CRITICAL | 9.9 | A weakness has been identified in D-Link DWR-M920 1.1.7. This issue affects the function sub_41E60C … |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-90693 | CRITICAL | 9.9 | A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the com… |
T1190
T1059
+1
|
|
2026-09-14 |
| CVE-2026-90692 | CRITICAL | 9.9 | A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Se… |
T1190
T1059
+1
|
|
2026-09-14 |
| CVE-2026-82787 | CRITICAL | 9.8 | Missing authentication for critical function vulnerability exists in CPSL-08P1EN. If this vulnerabil… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-90680 | CRITICAL | 9.9 | A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is th… |
T1190
T1059
+1
|
|
2026-09-14 |
| CVE-2026-90608 | CRITICAL | 9.9 | A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function fo… |
T1190
T1059
+1
|
|
2026-09-14 |
| CVE-2026-90607 | CRITICAL | 9.9 | A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNew… |
T1190
T1059
+1
|
|
2026-09-14 |
| CVE-2026-90606 | CRITICAL | 9.9 | A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects… |
T1190
T1059
+1
|
|
2026-09-14 |
| CVE-2026-90605 | CRITICAL | 9.9 | A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the… |
T1190
T1059
+1
|
|
2026-09-14 |
| CVE-2026-81648 | CRITICAL | 10.0 | The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check… |
T1078
T1548
|
|
2026-09-13 |
| CVE-2026-90558 | CRITICAL | 9.8 | sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting rout… |
T1190
T1059
+1
|
|
2026-09-12 |
| CVE-2026-78159 | CRITICAL | 9.8 | The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions … |
T1190
T1059
+1
|
|
2026-09-12 |
| CVE-2026-78006 | CRITICAL | 9.8 | The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions … |
T1190
T1059
+1
|
|
2026-09-12 |
| CVE-2026-85681 | CRITICAL | 9.8 | The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one … |
T1078
T1548
|
|
2026-09-12 |
| CVE-2026-84171 | CRITICAL | 9.8 | The WP images upload on piclect WordPress plugin through 1.0 does not validate the name or type of u… |
T1190
T1059
+1
|
|
2026-09-12 |
| CVE-2026-82845 | CRITICAL | 9.9 | The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metad… |
T1190
T1059
+1
|
|
2026-09-12 |