CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119645 | MEDIUM | 6.5 | ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that all… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119644 | MEDIUM | 5.4 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119482 | MEDIUM | 5.3 | Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting In… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119370 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119368 | MEDIUM | 5.3 | Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calenda… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-117349 | NONE | — | Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-117346 | NONE | — | Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116860 | MEDIUM | 5.3 | Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Con… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-112905 | CRITICAL | 9.0 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stor… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-111487 | NONE | — | An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D modu… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-110799 | CRITICAL | 9.8 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stor… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2015-20130 | MEDIUM | 6.1 | Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerabil… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2010-20125 | HIGH | 7.5 | DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remo… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-91915 | MEDIUM | 6.8 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-91914 | HIGH | 7.1 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing v… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-91913 | HIGH | 8.8 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-91912 | HIGH | 7.3 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-86715 | HIGH | 7.1 | Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Indus… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-49116 | NONE | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-49115 | NONE | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
T1190
T1203
|
|
2026-10-30 |