CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116211 | HIGH | 8.2 | YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the… |
T1190
T1005
+1
|
|
2026-10-25 |
| CVE-2026-116208 | HIGH | 8.1 | YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116207 | CRITICAL | 9.1 | YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL inje… |
T1190
T1005
+1
|
|
2026-10-25 |
| CVE-2026-116206 | MEDIUM | 6.4 | YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that allows aut… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116205 | MEDIUM | 5.3 | YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allo… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116204 | HIGH | 8.1 | YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116203 | MEDIUM | 6.1 | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116202 | MEDIUM | 5.4 | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116201 | HIGH | 8.8 | Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116200 | MEDIUM | 5.9 | Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing o… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116199 | HIGH | 8.1 | Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallbac… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116198 | MEDIUM | 4.3 | Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store tha… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116197 | LOW | 2.6 | Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116196 | MEDIUM | 5.3 | Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that leaks the … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116195 | MEDIUM | 6.1 | Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink fu… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116194 | MEDIUM | 6.8 | Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud b… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116193 | MEDIUM | 5.3 | Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav tha… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116192 | MEDIUM | 5.9 | rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unau… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116191 | HIGH | 7.5 | Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthentic… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116190 | LOW | 3.7 | rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV ba… |
T1190
T1203
|
|
2026-10-25 |