CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116817 | MEDIUM | 6.5 | OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated a… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-116815 | MEDIUM | 4.3 | OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116814 | MEDIUM | 6.5 | OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connectio… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116813 | MEDIUM | 6.5 | OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion th… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-116812 | MEDIUM | 6.5 | OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.servi… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-116811 | HIGH | 8.8 | OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allo… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116810 | MEDIUM | 5.3 | OpenPanel before 3.0.0 contains a missing authorization vulnerability that allows unauthenticated at… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-116809 | MEDIUM | 5.3 | OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedu… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-116808 | HIGH | 7.2 | OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to re… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-116807 | MEDIUM | 6.5 | OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to by… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-116806 | MEDIUM | 5.4 | OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116805 | MEDIUM | 4.3 | OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level proje… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116804 | MEDIUM | 6.1 | DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116803 | MEDIUM | 6.1 | DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116802 | MEDIUM | 6.1 | DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypas… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116801 | MEDIUM | 4.3 | Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object refe… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116800 | MEDIUM | 6.2 | WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows unauthenticated … |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-116604 | MEDIUM | 6.5 | A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected eleme… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116603 | MEDIUM | 4.7 | A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown func… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-111422 | NONE | — | In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its template… |
T1190
T1203
|
|
2026-10-27 |