CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111699 | MEDIUM | 4.8 | Niefy wx-api through 0.8.2 contains an authentication bypass vulnerability that allows unauthenticat… | — |
|
2026-10-16 |
| CVE-2026-111698 | MEDIUM | 6.5 | HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp Pay… | — |
|
2026-10-16 |
| CVE-2026-111697 | MEDIUM | 6.5 | HUIZHI ChargeOS cloud through 3.0.9 contains an insecure direct object reference vulnerability in th… | — |
|
2026-10-16 |
| CVE-2026-111696 | MEDIUM | 6.5 | data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPas… | — |
|
2026-10-16 |
| CVE-2026-111694 | MEDIUM | 5.3 | qKnow through 2.4.3 contains a missing authentication vulnerability that allows unauthenticated remo… | — |
|
2026-10-16 |
| CVE-2026-111689 | MEDIUM | 4.3 | Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated … | — |
|
2026-10-16 |
| CVE-2026-111688 | MEDIUM | 4.3 | Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated … | — |
|
2026-10-16 |
| CVE-2026-111683 | MEDIUM | 5.4 | Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenti… | — |
|
2026-10-16 |
| CVE-2026-111682 | MEDIUM | 6.5 | EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated lo… | — |
|
2026-10-16 |
| CVE-2026-111679 | MEDIUM | 5.4 | Ekko Studio through 0.7.36 contains a missing authorization vulnerability that allows any authentica… | — |
|
2026-10-16 |
| CVE-2026-111677 | MEDIUM | 5.5 | Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c ca… | — |
|
2026-10-16 |
| CVE-2026-111676 | MEDIUM | 4.3 | Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticate… | — |
|
2026-10-16 |
| CVE-2026-111674 | MEDIUM | 4.3 | Tbed through 20240319 contains a missing authorization vulnerability that allows any authenticated u… | — |
|
2026-10-16 |
| CVE-2026-111672 | MEDIUM | 4.3 | Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/view_pi… | — |
|
2026-10-16 |
| CVE-2026-111670 | MEDIUM | 4.3 | ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports hand… | — |
|
2026-10-16 |
| CVE-2026-111669 | MEDIUM | 6.5 | ZR.Admin.NET through 3.8.2 contains an sql injection vulnerability that allows authenticated attacke… | — |
|
2026-10-16 |
| CVE-2026-111668 | MEDIUM | 5.4 | AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py t… | — |
|
2026-10-16 |
| CVE-2026-111667 | MEDIUM | 4.3 | REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commen… | — |
|
2026-10-16 |
| CVE-2026-111666 | MEDIUM | 4.3 | Steedos Platform through 3.0.15-beta.51 contains an authorization bypass vulnerability that allows a… | — |
|
2026-10-16 |
| CVE-2026-111665 | MEDIUM | 5.4 | Piranha CMS through 12.2 contains a missing authorization vulnerability in the Piranha.Manager Langu… | — |
|
2026-10-16 |