CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-25467 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Theme… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119054 | MEDIUM | 5.4 | Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerabil… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119053 | MEDIUM | 5.3 | lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in s… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-119051 | MEDIUM | 5.9 | flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten() that al… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-119048 | MEDIUM | 4.2 | JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI C… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118425 | MEDIUM | 6.8 | A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identity and acc… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-116857 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116402 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brain… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-93011 | MEDIUM | 5.3 | A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC vali… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-93008 | MEDIUM | 6.8 | A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache record… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-93007 | MEDIUM | 5.3 | A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-93006 | MEDIUM | 6.8 | A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently us… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-56056 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-52709 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-48196 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-42703 | MEDIUM | 6.5 | Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-39741 | MEDIUM | 5.3 | Missing Authorization vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstil… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-39735 | MEDIUM | 6.5 | Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-24533 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-22386 | MEDIUM | 4.3 | Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrect… |
T1190
T1203
|
|
2026-10-29 |