CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118084 | MEDIUM | 6.5 | Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116848 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-113576 | MEDIUM | 6.3 | Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-110200 | MEDIUM | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitiv… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-110192 | MEDIUM | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitiv… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-110190 | MEDIUM | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on t… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-109891 | MEDIUM | 6.4 | Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allo… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-104331 | MEDIUM | 5.4 | IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-104316 | MEDIUM | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's r… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-104315 | MEDIUM | 4.3 | IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-104314 | MEDIUM | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share gra… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-104310 | MEDIUM | 4.3 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitiv… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-104309 | MEDIUM | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitiv… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-104308 | MEDIUM | 4.3 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-102590 | MEDIUM | 5.0 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitiv… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2025-13050 | MEDIUM | 5.4 | Broken Function Level Authorization allows execution of poller post-restart commands by authenticate… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-97073 | MEDIUM | 5.3 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-80069 | MEDIUM | 4.3 | MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability th… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-80067 | MEDIUM | 5.4 | MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allo… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-54871 | MEDIUM | 5.3 | Missing Authorization vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Ad… |
T1190
T1059
+1
|
|
2026-10-29 |