CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111630 | MEDIUM | 5.4 | abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in t… | — |
|
2026-10-16 |
| CVE-2026-111629 | MEDIUM | 4.3 | IoTSharp through 3.6.1 contains an insecure direct object reference vulnerability that allows any au… | — |
|
2026-10-16 |
| CVE-2026-111628 | MEDIUM | 5.0 | 10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-… |
T1190
T1203
|
|
2026-10-16 |
| CVE-2026-111625 | MEDIUM | 5.0 | 10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that all… | — |
|
2026-10-16 |
| CVE-2026-111623 | MEDIUM | 5.6 | Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows … | — |
|
2026-10-16 |
| CVE-2026-111622 | MEDIUM | 6.8 | smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows un… | — |
|
2026-10-16 |
| CVE-2026-111621 | MEDIUM | 4.3 | TDuck Survey Form through 5.3 contains a missing authorization vulnerability that allows any authent… | — |
|
2026-10-16 |
| CVE-2026-111620 | MEDIUM | 5.3 | O2OA through 10.0.2-ce contains an authorization bypass vulnerability in x_processplatform_assemble_… | — |
|
2026-10-16 |
| CVE-2026-111619 | MEDIUM | 6.5 | FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privil… | — |
|
2026-10-16 |
| CVE-2026-111618 | MEDIUM | 5.3 | CoAI (Chat Nio) through 4.0.0 contains an unauthenticated path traversal vulnerability in the genera… | — |
|
2026-10-16 |
| CVE-2026-111617 | MEDIUM | 6.5 | WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated … | — |
|
2026-10-16 |
| CVE-2026-111616 | MEDIUM | 4.9 | Oqtane Framework through 10.2.6 contains an authorization bypass vulnerability in SettingController … | — |
|
2026-10-16 |
| CVE-2026-111615 | MEDIUM | 6.5 | Mall4cloud through 4.0 contains an insecure direct object reference vulnerability that allows authen… | — |
|
2026-10-16 |
| CVE-2026-111614 | MEDIUM | 6.5 | DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseControlle… | — |
|
2026-10-16 |
| CVE-2026-111611 | MEDIUM | 5.4 | roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability t… | — |
|
2026-10-16 |
| CVE-2026-111610 | MEDIUM | 5.4 | B3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allow… | — |
|
2026-10-16 |
| CVE-2026-111608 | MEDIUM | 4.2 | Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenti… | — |
|
2026-10-16 |
| CVE-2026-111603 | MEDIUM | 4.3 | PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allo… | — |
|
2026-10-16 |
| CVE-2026-111392 | MEDIUM | 4.8 | SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, al… | — |
|
2026-10-16 |
| CVE-2026-109838 | MEDIUM | 5.1 | IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper … | — |
|
2026-10-16 |