CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-112001 | HIGH | 7.2 | ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restric… | — |
|
2026-10-18 |
| CVE-2026-112000 | HIGH | 7.6 | Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows … | — |
|
2026-10-18 |
| CVE-2026-111999 | HIGH | 7.5 | Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticate… | — |
|
2026-10-18 |
| CVE-2026-110897 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-18 |
| CVE-2026-110895 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-18 |
| CVE-2026-110383 | HIGH | 7.5 | Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature Electronic Signatur… | — |
|
2026-10-18 |
| CVE-2026-110382 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-18 |
| CVE-2026-110373 | HIGH | 8.1 | Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phon… | — |
|
2026-10-18 |
| CVE-2026-109895 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-18 |
| CVE-2026-108485 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-18 |
| CVE-2026-107436 | HIGH | 8.8 | Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials … | — |
|
2026-10-18 |
| CVE-2026-96534 | HIGH | 7.7 | The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress … | — |
|
2026-10-18 |
| CVE-2026-110981 | HIGH | 7.1 | The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navig… | — |
|
2026-10-18 |
| CVE-2026-110031 | HIGH | 7.2 | The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom… | — |
|
2026-10-18 |
| CVE-2026-111873 | HIGH | 7.3 | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbf… | — |
|
2026-10-18 |
| CVE-2026-111872 | HIGH | 7.3 | A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e6… | — |
|
2026-10-18 |
| CVE-2026-111871 | HIGH | 7.3 | A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999b… | — |
|
2026-10-18 |
| CVE-2026-111866 | HIGH | 7.3 | A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. … | — |
|
2026-10-18 |
| CVE-2026-111927 | HIGH | 7.7 | Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains… | — |
|
2026-10-17 |
| CVE-2026-111924 | HIGH | 7.5 | Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers… | — |
|
2026-10-17 |