CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111358 | MEDIUM | 5.4 | SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows … | — |
|
2026-10-15 |
| CVE-2026-111355 | MEDIUM | 6.3 | zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authent… | — |
|
2026-10-15 |
| CVE-2026-111353 | MEDIUM | 4.3 | Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticate… | — |
|
2026-10-15 |
| CVE-2026-111351 | MEDIUM | 4.2 | metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestCon… | — |
|
2026-10-15 |
| CVE-2026-111350 | MEDIUM | 5.0 | Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer grou… | — |
|
2026-10-15 |
| CVE-2026-111349 | MEDIUM | 5.3 | Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource … | — |
|
2026-10-15 |
| CVE-2026-111348 | MEDIUM | 5.4 | Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php a… | — |
|
2026-10-15 |
| CVE-2026-111347 | MEDIUM | 5.9 | go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository,… | — |
|
2026-10-15 |
| CVE-2026-111346 | MEDIUM | 5.4 | ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that a… | — |
|
2026-10-15 |
| CVE-2026-111345 | MEDIUM | 4.3 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated … | — |
|
2026-10-15 |
| CVE-2026-111344 | MEDIUM | 4.3 | APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticate… | — |
|
2026-10-15 |
| CVE-2026-111343 | MEDIUM | 4.3 | pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allo… | — |
|
2026-10-15 |
| CVE-2026-111331 | MEDIUM | 6.3 | Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router th… | — |
|
2026-10-15 |
| CVE-2026-111330 | MEDIUM | 5.9 | JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin c… | — |
|
2026-10-15 |
| CVE-2026-111324 | MEDIUM | 5.3 | rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated … | — |
|
2026-10-15 |
| CVE-2026-111323 | MEDIUM | 5.3 | RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the a… | — |
|
2026-10-15 |
| CVE-2026-111321 | MEDIUM | 5.4 | TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticat… | — |
|
2026-10-15 |
| CVE-2026-111320 | MEDIUM | 6.5 | ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that … | — |
|
2026-10-15 |
| CVE-2026-111313 | MEDIUM | 6.5 | JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-j… | — |
|
2026-10-15 |
| CVE-2026-111284 | MEDIUM | 5.4 | Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php t… | — |
|
2026-10-15 |