CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-113349 | MEDIUM | 4.3 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in CalendarUI::onEditEvent() a… | — |
|
2026-10-20 |
| CVE-2026-112787 | MEDIUM | 4.3 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ReportsUI::handleRequest() … | — |
|
2026-10-20 |
| CVE-2026-112786 | MEDIUM | 5.4 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() t… | — |
|
2026-10-20 |
| CVE-2026-112785 | MEDIUM | 4.3 | OpenCATS before 0.10.0 contains a missing authorization vulnerability that allows READ-level users t… | — |
|
2026-10-20 |
| CVE-2026-112784 | MEDIUM | 4.3 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/testEmailSettings.php … | — |
|
2026-10-20 |
| CVE-2026-112783 | MEDIUM | 4.3 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/deleteActivity.php and… | — |
|
2026-10-20 |
| CVE-2026-113378 | MEDIUM | 5.3 | A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown func… | — |
|
2026-10-20 |
| CVE-2026-111844 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-20 |
| CVE-2026-113465 | MEDIUM | 6.6 | It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administ… | — |
|
2026-10-20 |
| CVE-2024-2323 | MEDIUM | 4.8 | The RemoteUserStoreManagerService does not sufficiently validate password change attempts when the p… | — |
|
2026-10-20 |
| CVE-2026-93878 | MEDIUM | 6.4 | The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_l… | — |
|
2026-10-20 |
| CVE-2026-113403 | MEDIUM | 6.5 | ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticat… | — |
|
2026-10-20 |
| CVE-2026-113402 | MEDIUM | 6.5 | ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenti… | — |
|
2026-10-20 |
| CVE-2026-110306 | MEDIUM | 6.1 | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4… | — |
|
2026-10-20 |
| CVE-2026-110180 | MEDIUM | 4.8 | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2… | — |
|
2026-10-20 |
| CVE-2026-96903 | MEDIUM | 4.3 | The Easy Property Listings WordPress plugin before 3.5.27 does not perform authorisation checks on s… | — |
|
2026-10-20 |
| CVE-2026-96902 | MEDIUM | 5.3 | The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it … | — |
|
2026-10-20 |
| CVE-2026-100737 | MEDIUM | 4.9 | Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Elec… | — |
|
2026-10-20 |
| CVE-2026-109831 | MEDIUM | 5.4 | UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an… | — |
|
2026-10-20 |
| CVE-2026-12489 | MEDIUM | 6.5 | An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware … | — |
|
2026-10-20 |