CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111678 | LOW | 3.3 | Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8Chr… | — |
|
2026-10-16 |
| CVE-2026-111658 | LOW | 3.8 | SiteServer SSCMS through 7.4.0 contains an authorization bypass vulnerability in ChannelsController … | — |
|
2026-10-16 |
| CVE-2026-111655 | LOW | 3.8 | ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerabili… | — |
|
2026-10-16 |
| CVE-2026-111648 | LOW | 2.7 | BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows auth… | — |
|
2026-10-16 |
| CVE-2026-111624 | LOW | 3.7 | Umbraco CMS before 17.7.1 and 18.2.1 contains a missing authorization vulnerability that allows unau… | — |
|
2026-10-16 |
| CVE-2026-111609 | LOW | 3.8 | PKP Open Journal Systems through 3.5.0-5 contains an insecure direct object reference vulnerability … | — |
|
2026-10-16 |
| CVE-2026-111604 | LOW | 3.8 | eladmin through 2.7 contains an authorization bypass vulnerability that allows department-scoped use… | — |
|
2026-10-16 |
| CVE-2026-109839 | LOW | 3.1 | IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions d… | — |
|
2026-10-16 |
| CVE-2026-111581 | LOW | 3.3 | A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pas… | — |
|
2026-10-16 |
| CVE-2026-110805 | LOW | 2.6 | Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier … | — |
|
2026-10-16 |
| CVE-2026-110191 | LOW | 2.7 | The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capabili… |
T1190
T1059
+1
|
|
2026-10-16 |
| CVE-2026-110039 | LOW | 2.7 | The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting … | — |
|
2026-10-16 |
| CVE-2026-109401 | LOW | 2.7 | The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all vers… | — |
|
2026-10-16 |
| CVE-2026-111448 | LOW | 3.7 | Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sens… | — |
|
2026-10-16 |
| CVE-2026-111354 | LOW | 3.1 | crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated memb… | — |
|
2026-10-15 |
| CVE-2026-111332 | LOW | 3.7 | OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous… | — |
|
2026-10-15 |
| CVE-2026-111169 | LOW | 3.1 | La Suite Docs through 6.0.1 contains an authorization bypass vulnerability that allows authenticated… | — |
|
2026-10-15 |
| CVE-2026-55876 | LOW | 3.5 | Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, t… | — |
|
2026-10-15 |
| CVE-2026-55467 | LOW | 2.5 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.… | — |
|
2026-10-15 |
| CVE-2026-55453 | LOW | 3.3 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.… | — |
|
2026-10-15 |