CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-109209 | MEDIUM | 6.4 | The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plug… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-107745 | MEDIUM | 4.2 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-107625 | MEDIUM | 6.4 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Mem… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-105272 | MEDIUM | 4.2 | GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionalit… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2014-125137 | MEDIUM | 6.5 | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 cont… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2014-125136 | MEDIUM | 5.9 | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 cont… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2013-20009 | MEDIUM | 4.8 | Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows aut… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2013-20008 | MEDIUM | 6.8 | Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to c… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118272 | MEDIUM | 4.3 | A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118271 | MEDIUM | 4.3 | A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknow… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118129 | MEDIUM | 6.3 | A vulnerability was found in jeremyckahn Chitchatter up to f82538633813c854a81a8b2112a2f6ba17b39cbc.… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-58496 | MEDIUM | 4.3 | Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.0.7, the `SFN… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-50571 | MEDIUM | 5.7 | WebSub is a W3C recommendation produced by the Social Web Working Group. In recommendation REC-websu… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-118322 | MEDIUM | 4.3 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to pote… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-118319 | MEDIUM | 4.3 | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to poten… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-118318 | MEDIUM | 4.3 | Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to r… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-118128 | MEDIUM | 6.5 | A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultMana… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116774 | MEDIUM | 4.3 | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Fr… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116773 | MEDIUM | 4.3 | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Pr… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116691 | MEDIUM | 6.5 | MLflow is an open source AI engineering platform for agents, large language models, and machine lear… |
T1190
T1059
+1
|
|
2026-10-27 |