CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119665 | MEDIUM | 6.3 | WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119664 | MEDIUM | 4.3 | Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the c… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119663 | MEDIUM | 4.3 | Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cl… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119662 | HIGH | 8.8 | Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent net… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119661 | MEDIUM | 4.2 | ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteE… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119660 | CRITICAL | 9.8 | MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated att… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119659 | MEDIUM | 5.4 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated user… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119658 | MEDIUM | 4.3 | PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenti… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119657 | MEDIUM | 5.0 | FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that a… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119656 | HIGH | 7.5 | CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerability in the a… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119655 | HIGH | 7.5 | CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Good/GetGo… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119654 | HIGH | 8.8 | DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticate… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119653 | MEDIUM | 4.3 | Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated b… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119652 | MEDIUM | 4.3 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FriendContro… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119651 | MEDIUM | 5.4 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedControll… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119650 | MEDIUM | 5.4 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in PrivacyContr… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119649 | HIGH | 7.1 | Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryServ… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119648 | MEDIUM | 4.3 | Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that a… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119647 | MEDIUM | 4.3 | RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServiceImpl.se… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119646 | MEDIUM | 4.3 | Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated u… |
T1190
T1203
|
|
2026-10-30 |