CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111664 | MEDIUM | 4.4 | Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileg… | — |
|
2026-10-16 |
| CVE-2026-111662 | MEDIUM | 5.8 | Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticat… | — |
|
2026-10-16 |
| CVE-2026-111661 | MEDIUM | 5.3 | waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthentica… | — |
|
2026-10-16 |
| CVE-2026-111660 | MEDIUM | 6.5 | waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthentica… | — |
|
2026-10-16 |
| CVE-2026-111659 | MEDIUM | 6.5 | Waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthentica… | — |
|
2026-10-16 |
| CVE-2026-111657 | MEDIUM | 4.3 | BeikeShop through 2.0.0.31 contains an insecure direct object reference vulnerability in the markAsS… | — |
|
2026-10-16 |
| CVE-2026-111656 | MEDIUM | 5.4 | ChatWiki through 2.9.6 contains an insecure direct object reference vulnerability that allows authen… | — |
|
2026-10-16 |
| CVE-2026-111654 | MEDIUM | 6.3 | FastBee through 2.1.0 contains an insecure direct object reference vulnerability that allows authent… | — |
|
2026-10-16 |
| CVE-2026-111653 | MEDIUM | 5.3 | 53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated at… |
T1190
T1059
+1
|
|
2026-10-16 |
| CVE-2026-111652 | MEDIUM | 5.3 | Engineercms through 2.0.5 contains a missing authorization vulnerability in AttachController.Attachm… | — |
|
2026-10-16 |
| CVE-2026-111651 | MEDIUM | 6.5 | Risesoft Digital-Infrastructure through 9.6.11 contains a missing authorization vulnerability in the… | — |
|
2026-10-16 |
| CVE-2026-111649 | MEDIUM | 6.5 | Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability i… | — |
|
2026-10-16 |
| CVE-2026-111647 | MEDIUM | 4.3 | PickMall lilishop through 5.0.0 contains an insecure direct object reference vulnerability that allo… | — |
|
2026-10-16 |
| CVE-2026-111646 | MEDIUM | 5.9 | SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauthenticated … | — |
|
2026-10-16 |
| CVE-2026-111645 | MEDIUM | 5.4 | MrDoc through 1.1.1 contains a missing object-level authorization vulnerability in the ImportLocalDo… | — |
|
2026-10-16 |
| CVE-2026-111640 | MEDIUM | 5.4 | DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialo… | — |
|
2026-10-16 |
| CVE-2026-111637 | MEDIUM | 5.3 | NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated at… | — |
|
2026-10-16 |
| CVE-2026-111635 | MEDIUM | 4.3 | Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated view… | — |
|
2026-10-16 |
| CVE-2026-111632 | MEDIUM | 5.4 | Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated AP… | — |
|
2026-10-16 |
| CVE-2026-111631 | MEDIUM | 5.4 | Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor-leve… | — |
|
2026-10-16 |