CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119328 | MEDIUM | 6.5 | Immich is a high-performance self-hosted photo and video management solution. Prior to 3.3.0, the un… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-116252 | MEDIUM | 6.5 | pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116251 | MEDIUM | 4.2 | pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116250 | MEDIUM | 6.5 | In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with ch… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116248 | MEDIUM | 6.8 | In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116246 | MEDIUM | 6.5 | To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116240 | MEDIUM | 6.5 | In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permis… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-7005 | MEDIUM | 6.1 | WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerab… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-7004 | MEDIUM | 6.1 | WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vuln… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-7003 | MEDIUM | 5.3 | WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauth… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-62303 | MEDIUM | 5.9 | Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, `SegmentTreeN… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-62122 | MEDIUM | 5.3 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Con… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62121 | MEDIUM | 6.5 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62057 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Fahim… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62056 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting In… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62047 | MEDIUM | 4.3 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exp… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62023 | MEDIUM | 4.3 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Wid… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62019 | MEDIUM | 4.3 | Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorr… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-54854 | MEDIUM | 6.3 | Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions. |
T1068
T1134
|
|
2026-10-30 |
| CVE-2026-54850 | MEDIUM | 6.5 | Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions. |
T1190
T1203
|
|
2026-10-30 |