CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116406 | MEDIUM | 4.3 | Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploit… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116387 | MEDIUM | 5.3 | Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorr… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-115712 | MEDIUM | 4.3 | Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modific… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115711 | MEDIUM | 6.4 | Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115707 | MEDIUM | 6.4 | Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic… |
T1068
T1134
|
|
2026-10-29 |
| CVE-2026-115706 | MEDIUM | 6.8 | Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lea… |
T1068
T1134
|
|
2026-10-29 |
| CVE-2026-115610 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115605 | MEDIUM | 4.3 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrec… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-115601 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-for-woocomm… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-114706 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-114181 | MEDIUM | 5.3 | Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-tax… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-110881 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-107023 | MEDIUM | 6.5 | Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized at… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-93010 | MEDIUM | 4.3 | A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresse… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-93009 | MEDIUM | 4.3 | A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a c… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-54862 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-48202 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-48195 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-42707 | MEDIUM | 4.3 | Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings a… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-39782 | MEDIUM | 5.3 | Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly… |
T1190
T1203
|
|
2026-10-29 |