CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111923 | HIGH | 7.5 | Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property l… | — |
|
2026-10-17 |
| CVE-2026-111909 | HIGH | 8.1 | phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that al… | — |
|
2026-10-17 |
| CVE-2026-111908 | HIGH | 8.3 | phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authori… | — |
|
2026-10-17 |
| CVE-2026-111907 | HIGH | 7.1 | phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/a… | — |
|
2026-10-17 |
| CVE-2026-111901 | HIGH | 7.5 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability i… | — |
|
2026-10-17 |
| CVE-2026-111898 | HIGH | 7.5 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows K… | — |
|
2026-10-17 |
| CVE-2026-111897 | HIGH | 7.1 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows ca… | — |
|
2026-10-17 |
| CVE-2026-111884 | HIGH | 8.3 | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password when c… | — |
|
2026-10-17 |
| CVE-2026-111882 | HIGH | 8.1 | phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypas… | — |
|
2026-10-17 |
| CVE-2026-111881 | HIGH | 7.6 | FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mis… | — |
|
2026-10-17 |
| CVE-2026-111880 | HIGH | 7.4 | FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-call… | — |
|
2026-10-17 |
| CVE-2026-109701 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-17 |
| CVE-2026-110889 | HIGH | 7.5 | Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framew… | — |
|
2026-10-17 |
| CVE-2026-111110 | HIGH | 7.2 | The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerabl… | — |
|
2026-10-17 |
| CVE-2026-100316 | HIGH | 7.2 | The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored C… | — |
|
2026-10-17 |
| CVE-2026-110384 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-17 |
| CVE-2026-96660 | HIGH | 7.2 | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, Us… | — |
|
2026-10-17 |
| CVE-2026-92798 | HIGH | 8.1 | The User Registration & Membership plugin for WordPress is vulnerable to Arbitrary Shortcode Executi… |
T1190
T1059
+1
|
|
2026-10-17 |
| CVE-2026-108123 | HIGH | 7.5 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass … | — |
|
2026-10-17 |
| CVE-2026-103899 | HIGH | 7.2 | The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripti… | — |
|
2026-10-17 |