CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-28329 | MEDIUM | 6.4 | SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF… | — |
|
2026-10-20 |
| CVE-2026-113656 | MEDIUM | 5.3 | ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the ApostropheC… | — |
|
2026-10-20 |
| CVE-2026-113655 | MEDIUM | 4.3 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an authenticated… | — |
|
2026-10-20 |
| CVE-2026-113652 | MEDIUM | 5.6 | ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadf… | — |
|
2026-10-20 |
| CVE-2026-113650 | MEDIUM | 5.3 | ApostropheCMS is an open-source Node.js content management system. In sanitize-html 2.18.0, when an … | — |
|
2026-10-20 |
| CVE-2026-113649 | MEDIUM | 6.5 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-expo… | — |
|
2026-10-20 |
| CVE-2026-113505 | MEDIUM | 4.3 | A flaw has been found in aaPanel up to 8.25.0. Impacted is the function send_file of the file BTPane… | — |
|
2026-10-20 |
| CVE-2026-112958 | MEDIUM | 5.4 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a project-define… | — |
|
2026-10-20 |
| CVE-2026-112957 | MEDIUM | 4.3 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the getOne REST … | — |
|
2026-10-20 |
| CVE-2026-113683 | MEDIUM | 6.1 | VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vuln… | — |
|
2026-10-20 |
| CVE-2026-113681 | MEDIUM | 5.5 | OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integ… | — |
|
2026-10-20 |
| CVE-2026-113680 | MEDIUM | 5.5 | HarfBuzz from 8.0.0 through 14.6.0 contains a NULL pointer dereference vulnerability in the experime… | — |
|
2026-10-20 |
| CVE-2026-113677 | MEDIUM | 5.4 | Froxlor from 0.10.0 before 2.3.15 contains a missing authorization vulnerability in the SubDomains.d… | — |
|
2026-10-20 |
| CVE-2026-113676 | MEDIUM | 4.3 | Froxlor from 0.10.0 before 2.3.15 contains an authorization bypass vulnerability in the Admins.get A… | — |
|
2026-10-20 |
| CVE-2026-113612 | MEDIUM | 5.4 | SparkyFitness before 0.17.0 contains a missing authorization vulnerability that allows authenticated… | — |
|
2026-10-20 |
| CVE-2026-113611 | MEDIUM | 4.9 | Outline before 1.8.0 contains an improper access revocation vulnerability that allows deleted admini… | — |
|
2026-10-20 |
| CVE-2026-113610 | MEDIUM | 5.4 | Xen Orchestra before 6.9.0 contains an authorization bypass vulnerability in the xo-server user.set … | — |
|
2026-10-20 |
| CVE-2026-113608 | MEDIUM | 5.3 | Configurable Reports block for Moodle (moodle-block_configurablereports) before 5.3.1 contains an sq… | — |
|
2026-10-20 |
| CVE-2026-113607 | MEDIUM | 6.5 | Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability th… | — |
|
2026-10-20 |
| CVE-2026-113604 | MEDIUM | 5.5 | Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader … | — |
|
2026-10-20 |