CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-110367 | MEDIUM | 5.3 | Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows … | — |
|
2026-10-15 |
| CVE-2026-108175 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-15 |
| CVE-2026-106707 | MEDIUM | 5.4 | XXL-JOB <=3.5.0-SNAPSHOT contains a stored Cross-Site Scripting (XSS) vulnerability in the job log l… | — |
|
2026-10-15 |
| CVE-2026-106706 | MEDIUM | 5.4 | XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting (XSS) in the GLUE code e… | — |
|
2026-10-15 |
| CVE-2026-104266 | MEDIUM | 6.5 | tinytag is a Python library for reading audio file metadata. From 2.0.0 until 2.3.0, an M4A file con… | — |
|
2026-10-15 |
| CVE-2026-103350 | MEDIUM | 5.3 | Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rent… | — |
|
2026-10-15 |
| CVE-2026-102740 | MEDIUM | 5.8 | The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously pro… | — |
|
2026-10-15 |
| CVE-2026-78851 | MEDIUM | 6.5 | Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain… | — |
|
2026-10-15 |
| CVE-2026-78850 | MEDIUM | 5.0 | An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteCon… | — |
|
2026-10-15 |
| CVE-2026-58395 | MEDIUM | 4.3 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete… | — |
|
2026-10-15 |
| CVE-2026-58394 | MEDIUM | 5.2 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, src/www/system_… | — |
|
2026-10-15 |
| CVE-2026-58393 | MEDIUM | 5.9 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Cli… | — |
|
2026-10-15 |
| CVE-2026-58392 | MEDIUM | 5.4 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS pag… | — |
|
2026-10-15 |
| CVE-2026-58391 | MEDIUM | 5.4 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules … | — |
|
2026-10-15 |
| CVE-2026-111096 | MEDIUM | 6.7 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was p… | — |
|
2026-10-15 |
| CVE-2026-111092 | MEDIUM | 6.5 | In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed … | — |
|
2026-10-15 |
| CVE-2026-100350 | MEDIUM | 5.3 | kin-openapi is a Go project for handling OpenAPI files. From 0.145.0 until 0.146.0, openapi3filter r… | — |
|
2026-10-15 |
| CVE-2026-100348 | MEDIUM | 5.3 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can derefe… | — |
|
2026-10-15 |
| CVE-2026-100347 | MEDIUM | 5.3 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationH… | — |
|
2026-10-15 |
| CVE-2026-95180 | MEDIUM | 5.5 | An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sens… | — |
|
2026-10-15 |