CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116011 | HIGH | 7.5 | Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows… |
T1078
T1548
|
|
2026-10-24 |
| CVE-2026-116010 | MEDIUM | 4.3 | RosarioSIS before 12.9.1 contains a missing authorization vulnerability that allows authenticated te… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116009 | HIGH | 8.8 | Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the me… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116008 | MEDIUM | 4.3 | DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController::upda… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-110018 | HIGH | 8.8 | The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Buil… |
T1068
T1134
|
|
2026-10-24 |
| CVE-2026-115998 | MEDIUM | 4.3 | IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findin… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115994 | MEDIUM | 5.4 | BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker m… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114705 | MEDIUM | 6.5 | Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploi… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114194 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115993 | MEDIUM | 6.8 | Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could… |
T1190
T1059
+1
|
|
2026-10-24 |
| CVE-2026-94075 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite a… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115975 | HIGH | 7.1 | Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to cr… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114697 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114695 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114694 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114693 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114196 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Inje… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114190 | MEDIUM | 5.9 | Insertion of Sensitive Information Into Sent Data vulnerability in Hai Zheng / Lite Speed Cache Lite… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114179 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114178 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |