CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-109369 | MEDIUM | 6.8 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass … | — |
|
2026-10-17 |
| CVE-2026-109368 | MEDIUM | 6.5 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information… | — |
|
2026-10-17 |
| CVE-2026-107752 | MEDIUM | 4.9 | The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wp_usces… | — |
|
2026-10-17 |
| CVE-2026-107744 | MEDIUM | 6.5 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vul… | — |
|
2026-10-17 |
| CVE-2026-111601 | MEDIUM | 6.1 | The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scr… | — |
|
2026-10-17 |
| CVE-2026-107763 | MEDIUM | 4.3 | The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions … | — |
|
2026-10-17 |
| CVE-2026-89096 | MEDIUM | 5.9 | A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (D… | — |
|
2026-10-16 |
| CVE-2026-89088 | MEDIUM | 5.5 | A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing … | — |
|
2026-10-16 |
| CVE-2026-89085 | MEDIUM | 6.6 | A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially craft… | — |
|
2026-10-16 |
| CVE-2026-111802 | MEDIUM | 6.6 | A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus… | — |
|
2026-10-16 |
| CVE-2026-96628 | MEDIUM | 4.3 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.11.… | — |
|
2026-10-16 |
| CVE-2026-62438 | MEDIUM | 6.1 | A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose se… | — |
|
2026-10-16 |
| CVE-2026-96542 | MEDIUM | 5.0 | Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (vers… | — |
|
2026-10-16 |
| CVE-2026-64862 | MEDIUM | 6.5 | Frappe HR is an open-source human resources management solution (HRMS). Prior to 15.58.3 and 16.4.3,… | — |
|
2026-10-16 |
| CVE-2026-55796 | MEDIUM | 6.5 | Frappe HR is an open-source human resources management solution (HRMS). Prior to 15.60.3 and 16.7.1,… | — |
|
2026-10-16 |
| CVE-2026-108373 | MEDIUM | 6.5 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.27.0, … | — |
|
2026-10-16 |
| CVE-2026-59966 | MEDIUM | 5.7 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.… |
T1190
T1059
+1
|
|
2026-10-16 |
| CVE-2026-85977 | MEDIUM | 5.3 | A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially … |
T1190
T1059
+1
|
|
2026-10-16 |
| CVE-2026-85231 | MEDIUM | 6.5 | A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by s… | — |
|
2026-10-16 |
| CVE-2026-17491 | MEDIUM | 5.4 | IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restr… | — |
|
2026-10-16 |