CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-61996 | HIGH | 8.5 | Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions. |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-61995 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-61993 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-61989 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-61988 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Auction Nudge – Your eBay on Your Site <= 8.4.0 versio… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-54866 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 vers… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-54864 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-42701 | HIGH | 7.2 | Shop manager PHP Object Injection in YayMail <= 4.4.6 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-42692 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-27394 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Eventer <= 0.1.1 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-119144 | HIGH | 8.8 | Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection v… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119129 | HIGH | 8.1 | ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 contains a missing authorization vulnerability … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119128 | HIGH | 7.4 | ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that … |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-119127 | HIGH | 8.1 | ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 UI that a… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-119120 | HIGH | 7.5 | Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Do… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119119 | HIGH | 7.5 | Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _cla… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-118085 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions. |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118083 | HIGH | 7.5 | Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-118082 | HIGH | 8.8 | Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions. |
T1068
T1134
|
|
2026-10-29 |
| CVE-2026-118081 | HIGH | 8.8 | Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions. |
T1190
T1203
|
|
2026-10-29 |