CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-106087 | NONE | — | TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this v… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-105323 | MEDIUM | 6.1 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-102800 | NONE | — | Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - Th… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-117541 | MEDIUM | 5.3 | svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception vulnerability that allows atta… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117540 | HIGH | 7.5 | svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanit… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-117539 | LOW | 3.5 | darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabil… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-117538 | MEDIUM | 4.1 | REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117537 | MEDIUM | 4.1 | REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability that allows authenticat… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117536 | HIGH | 8.8 | REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the backend user adminis… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117535 | MEDIUM | 6.1 | REDAXO before 5.21.3 contains a reflected cross-site scripting vulnerability in the backend media po… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-117534 | MEDIUM | 5.4 | REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the structure/history pl… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117533 | MEDIUM | 4.4 | REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scripting vulnerability because rex_me… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117532 | CRITICAL | 9.8 | REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structur… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-117530 | MEDIUM | 6.7 | In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-117466 | NONE | — | In affected versions of Octopus Server, a user holding the System Manager role could escalate their … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117341 | NONE | — | In affected versions of Octopus Server, creating a user invitation writes the invitation code to the… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116900 | MEDIUM | 5.4 | REDAXO before 5.21.4 contains a stored cross-site scripting vulnerability that allows content editor… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116899 | MEDIUM | 6.5 | REDAXO before 5.21.4 contains a broken access control vulnerability that allows authenticated editor… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116898 | HIGH | 7.1 | REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116897 | MEDIUM | 6.5 | REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/version an… |
T1190
T1203
|
|
2026-10-27 |