CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-37468 | NONE | — | Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker t… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119466 | MEDIUM | 5.4 | Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosq… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119367 | MEDIUM | 5.4 | Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calenda… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119365 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119300 | MEDIUM | 6.5 | Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119299 | MEDIUM | 5.9 | gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in lay… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119298 | MEDIUM | 4.2 | croc is a tool that allows any two computers to simply and securely transfer files and folders. Prio… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119148 | MEDIUM | 6.5 | Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119116 | HIGH | 7.8 | A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sampl… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-115642 | HIGH | 8.3 | In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a req… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-112816 | NONE | — | Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 b… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-104623 | MEDIUM | 6.3 | A security vulnerability exists in the authorization handling for the local (management) cluster she… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2025-49602 | NONE | — | An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrato… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62141 | MEDIUM | 5.4 | Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting In… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119722 | HIGH | 7.8 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in rea… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119721 | MEDIUM | 6.1 | Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119720 | MEDIUM | 5.5 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119719 | HIGH | 7.8 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blen… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119718 | HIGH | 7.8 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by i… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119717 | HIGH | 8.1 | pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows at… |
T1190
T1203
|
|
2026-10-30 |