CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111910 | MEDIUM | 6.5 | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerabili… | — |
|
2026-10-17 |
| CVE-2026-111906 | MEDIUM | 6.5 | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulner… | — |
|
2026-10-17 |
| CVE-2026-111905 | MEDIUM | 6.0 | phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object ref… | — |
|
2026-10-17 |
| CVE-2026-111904 | MEDIUM | 5.3 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows … | — |
|
2026-10-17 |
| CVE-2026-111903 | MEDIUM | 5.4 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSa… | — |
|
2026-10-17 |
| CVE-2026-111902 | MEDIUM | 5.3 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in isFaqAccess… | — |
|
2026-10-17 |
| CVE-2026-111900 | MEDIUM | 4.3 | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization vulnerabi… | — |
|
2026-10-17 |
| CVE-2026-111896 | MEDIUM | 5.4 | phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in … | — |
|
2026-10-17 |
| CVE-2026-111895 | MEDIUM | 6.8 | phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Mic… | — |
|
2026-10-17 |
| CVE-2026-111894 | MEDIUM | 5.4 | phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting… | — |
|
2026-10-17 |
| CVE-2026-111893 | MEDIUM | 6.5 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupControl… | — |
|
2026-10-17 |
| CVE-2026-111892 | MEDIUM | 6.5 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user/pas… | — |
|
2026-10-17 |
| CVE-2026-111891 | MEDIUM | 5.5 | phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in the g… | — |
|
2026-10-17 |
| CVE-2026-111890 | MEDIUM | 5.5 | phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in UserC… | — |
|
2026-10-17 |
| CVE-2026-111889 | MEDIUM | 4.3 | phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing authorization … | — |
|
2026-10-17 |
| CVE-2026-111887 | MEDIUM | 5.3 | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerabilit… | — |
|
2026-10-17 |
| CVE-2026-111886 | MEDIUM | 6.5 | phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta lacks brute-force lockout in the removeTwofactorConfig… | — |
|
2026-10-17 |
| CVE-2026-111885 | MEDIUM | 5.5 | phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in GroupC… | — |
|
2026-10-17 |
| CVE-2026-110882 | MEDIUM | 4.3 | Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notificati… | — |
|
2026-10-17 |
| CVE-2025-71435 | MEDIUM | 4.2 | Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated use… | — |
|
2026-10-17 |