CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116217 | MEDIUM | 6.1 | RosarioSIS before 12.9.2 contains a reflected cross-site scripting vulnerability in modules/Food_Ser… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-116216 | MEDIUM | 5.3 | MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveDat… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-116215 | LOW | 3.1 | MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that al… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116214 | CRITICAL | 9.1 | MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthe… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-116213 | MEDIUM | 4.9 | Webasyst Framework through 4.4.0 contains an arbitrary file read vulnerability in waArchiveTar::writ… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116212 | MEDIUM | 5.4 | Webasyst Framework through 4.4.0 contains a stored cross-site scripting vulnerability in the Photos … |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116210 | MEDIUM | 6.5 | Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos a… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115700 | NONE | — | Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side Request F… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-115693 | NONE | — | Improper Certificate Validation vulnerability in hackney_ssl in benoitc hackney allows an on-path at… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115269 | NONE | — | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-115196 | MEDIUM | 5.4 | An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mauti… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-115195 | MEDIUM | 6.5 | A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). The endpo… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-115194 | MEDIUM | 6.5 | A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through t… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115193 | HIGH | 8.2 | A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7. Val… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115192 | HIGH | 7.1 | An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}). … |
T1190
T1005
+1
|
|
2026-10-26 |
| CVE-2026-115191 | HIGH | 7.1 | A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration … |
T1190
T1005
+1
|
|
2026-10-26 |
| CVE-2026-115190 | HIGH | 8.0 | An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segm… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-115189 | HIGH | 8.8 | A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic.… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-115188 | CRITICAL | 9.9 | An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When pr… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-114216 | NONE | — | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in th… |
T1078
T1548
|
|
2026-10-26 |