CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119545 | MEDIUM | 5.3 | Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a server-side req… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119429 | MEDIUM | 4.3 | phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticate… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119428 | LOW | 3.7 | phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenti… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119427 | MEDIUM | 4.2 | phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting() that allo… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119426 | HIGH | 7.5 | phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote atta… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119425 | MEDIUM | 5.4 | OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerability in the captive p… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119424 | MEDIUM | 6.8 | OPNsense core before 26.7.8 contains a configuration line injection vulnerability that allows authen… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119423 | MEDIUM | 5.3 | OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attac… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119422 | MEDIUM | 5.9 | Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauth… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119421 | MEDIUM | 5.9 | Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119420 | HIGH | 8.8 | Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization adminis… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119419 | HIGH | 8.1 | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119418 | HIGH | 8.1 | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119417 | LOW | 3.7 | CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 c… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119416 | MEDIUM | 4.8 | CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119415 | LOW | 3.7 | CakePHP through 5.4.3 contains a header injection vulnerability in FormDataPart that allows attacker… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119414 | MEDIUM | 4.3 | Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vuln… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119409 | HIGH | 7.2 | OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users wi… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119408 | HIGH | 8.8 | n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulne… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119407 | HIGH | 7.1 | Element Web and Element Desktop before 1.12.32 accept guest credentials from URL fragment parameters… |
T1190
T1059
+1
|
|
2026-10-30 |