CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-97627 | HIGH | 7.2 | Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Elec… | — |
|
2026-10-20 |
| CVE-2026-93300 | HIGH | 7.5 | The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email'… | — |
|
2026-10-20 |
| CVE-2026-113386 | HIGH | 7.1 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A rem… | — |
|
2026-10-20 |
| CVE-2026-105299 | HIGH | 8.7 | Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream req… | — |
|
2026-10-20 |
| CVE-2026-86961 | HIGH | 7.8 | A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS … | — |
|
2026-10-20 |
| CVE-2026-86949 | HIGH | 8.8 | This issue was addressed by enforcing library validation on the affected binaries. This issue is fix… | — |
|
2026-10-20 |
| CVE-2026-86922 | HIGH | 8.8 | A type confusion issue was addressed with improved state management. This issue is fixed in Safari 2… | — |
|
2026-10-20 |
| CVE-2026-86919 | HIGH | 8.8 | A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and i… | — |
|
2026-10-20 |
| CVE-2026-77937 | HIGH | 8.1 | Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impe… | — |
|
2026-10-20 |
| CVE-2026-77935 | HIGH | 8.3 | Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go … | — |
|
2026-10-20 |
| CVE-2026-77934 | HIGH | 8.8 | Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user … | — |
|
2026-10-20 |
| CVE-2026-77930 | HIGH | 8.8 | EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to r… | — |
|
2026-10-20 |
| CVE-2026-77926 | HIGH | 8.8 | Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin user… | — |
|
2026-10-20 |
| CVE-2026-28853 | HIGH | 7.8 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe… | — |
|
2026-10-20 |
| CVE-2026-109444 | HIGH | 8.8 | OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers … | — |
|
2026-10-20 |
| CVE-2026-109443 | HIGH | 8.8 | JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated us… | — |
|
2026-10-20 |
| CVE-2026-109440 | HIGH | 8.1 | LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote … | — |
|
2026-10-20 |
| CVE-2026-105297 | HIGH | 7.5 | Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless t… | — |
|
2026-10-20 |
| CVE-2026-109126 | HIGH | 8.8 | IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a … | — |
|
2026-10-20 |
| CVE-2026-107400 | HIGH | 8.8 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to … |
T1190
T1059
+1
|
|
2026-10-20 |