CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-112869 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-112866 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-24 |
| CVE-2026-112844 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-111402 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-24 |
| CVE-2026-110892 | MEDIUM | 6.5 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrec… |
T1190
T1059
+1
|
|
2026-10-24 |
| CVE-2026-115803 | MEDIUM | 4.3 | A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServlet… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115802 | MEDIUM | 4.3 | A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train o… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-108013 | MEDIUM | 6.8 | BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/1… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-97353 | MEDIUM | 5.4 | The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or owne… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-97352 | MEDIUM | 4.3 | The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check … |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-87835 | MEDIUM | 6.5 | The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a vis… |
T1078
T1548
|
|
2026-10-24 |
| CVE-2026-114429 | MEDIUM | 6.8 | The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotsp… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-113674 | LOW | 3.7 | The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings su… |
T1078
T1548
|
|
2026-10-24 |
| CVE-2026-113673 | HIGH | 7.2 | The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined tex… |
T1190
T1059
+1
|
|
2026-10-24 |
| CVE-2026-113493 | MEDIUM | 6.8 | The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map short… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-113492 | MEDIUM | 5.3 | The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password che… |
T1078
T1548
|
|
2026-10-24 |
| CVE-2026-113491 | MEDIUM | 6.4 | The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-113490 | MEDIUM | 5.3 | The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check whe… |
T1078
T1548
|
|
2026-10-24 |
| CVE-2026-113489 | MEDIUM | 4.3 | The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belon… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-112207 | HIGH | 7.1 | The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link be… |
T1190
T1059
+1
|
|
2026-10-24 |