CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2019-25781 | HIGH | 7.5 | Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link p… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-49142 | HIGH | 8.8 | OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveill… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-96767 | HIGH | 7.2 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cro… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-119028 | HIGH | 8.8 | oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inj… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119027 | HIGH | 7.5 | oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inj… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119025 | HIGH | 7.5 | open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to exe… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115821 | HIGH | 7.2 | The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_fi… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-110184 | HIGH | 7.5 | The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in a… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-103665 | HIGH | 7.8 | The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-33924 | HIGH | 7.2 | Two OS command injection vulnerabilities were discovered in the update installation functionality du… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-33923 | HIGH | 7.2 | A signature verification vulnerability was discovered in the update installation functionality due t… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116409 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-115967 | HIGH | 8.8 | Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number al… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115965 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-115963 | HIGH | 7.1 | Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-strea… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115611 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115599 | HIGH | 7.5 | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115592 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-114193 | HIGH | 7.5 | Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exploiting In… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-112827 | HIGH | 7.1 | Missing Authorization vulnerability in VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce h… |
T1190
T1059
+1
|
|
2026-10-29 |