CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115953 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115951 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115950 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115948 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-26 |
| CVE-2026-115608 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-26 |
| CVE-2026-115595 | MEDIUM | 5.3 | Missing Authorization vulnerability in Supsystic Contact Form by Supsystic contact-form-by-supsystic… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115594 | MEDIUM | 6.5 | Insertion of Sensitive Information Into Sent Data vulnerability in David Lingren Media LIbrary Assis… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-114708 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-114707 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-97295 | MEDIUM | 4.3 | Cross-Site Request Forgery (CSRF) vulnerability in David Lingren Media LIbrary Assistant media-libra… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-97255 | MEDIUM | 5.3 | Authorization Bypass Through User-Controlled Key vulnerability in WProyal Royal Elementor Addons roy… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-97254 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-4316 | NONE | — | Reflected Cross-Site Scripting (XSS) in Gym Management Software IsMyGym by Zuinq Studio affecting th… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116255 | MEDIUM | 5.3 | A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Af… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116254 | MEDIUM | 6.5 | A vulnerability was identified in rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d. Thi… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116253 | HIGH | 7.3 | A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.in… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116237 | HIGH | 8.4 | A vulnerability was found in Oray Pugongying X5 Pro 7.6.1. This affects an unknown part of the compo… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115958 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board a… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115949 | MEDIUM | 6.5 | Missing Authorization vulnerability in WP Smart Widgets Better Post & Filter Widgets for Elementor b… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115614 | MEDIUM | 5.3 | Missing Authorization vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental… |
T1190
T1059
+1
|
|
2026-10-26 |