CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-52710 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithem… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-39739 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-27061 | MEDIUM | 6.5 | Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-120046 | MEDIUM | 5.3 | Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTo… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-120007 | MEDIUM | 6.5 | NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthentica… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119842 | MEDIUM | 6.5 | A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a special… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119729 | MEDIUM | 6.5 | A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119728 | MEDIUM | 5.5 | A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119727 | MEDIUM | 6.5 | A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119117 | MEDIUM | 6.5 | Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java befor… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116854 | MEDIUM | 6.5 | Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116853 | MEDIUM | 6.5 | Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-116410 | MEDIUM | 6.5 | Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-115947 | MEDIUM | 6.5 | Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-115604 | MEDIUM | 5.0 | Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-114711 | MEDIUM | 6.5 | Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107868 | MEDIUM | 5.3 | Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions. |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-104674 | MEDIUM | 4.3 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Con… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-9239 | MEDIUM | 6.4 | The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment Al… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-69446 | MEDIUM | 4.4 | Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate … |
T1190
T1203
|
|
2026-10-30 |