CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-103359 | MEDIUM | 5.3 | The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not verify the authenti… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-117472 | MEDIUM | 4.3 | Psono Server CE && EE versions 4.0.33 through 7.2.3 compared the request path for the bulk-secret-re… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117471 | MEDIUM | 5.4 | Psono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117470 | MEDIUM | 6.5 | Psono Server CE & EE versions 3.1.0 through 7.2.3 did not consume a stored WebAuthn challenge after … |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-117469 | MEDIUM | 5.4 | Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer c… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-117468 | MEDIUM | 6.5 | Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write s… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-103332 | MEDIUM | 5.3 | The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify t… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-103312 | MEDIUM | 5.3 | The Payment Integration Wompi WordPress plugin through 4.0.1 does not verify the authenticity of inc… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-116844 | MEDIUM | 4.8 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because Transf… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116842 | MEDIUM | 6.1 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq … |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116841 | MEDIUM | 5.5 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq l… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116840 | MEDIUM | 6.1 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader th… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116829 | MEDIUM | 6.6 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader t… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116608 | MEDIUM | 5.4 | A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this i… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116605 | MEDIUM | 5.3 | A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2025-71439 | MEDIUM | 5.5 | llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2024-58399 | MEDIUM | 6.1 | llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allow… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116828 | MEDIUM | 4.9 | YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter i… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-116827 | MEDIUM | 6.8 | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import co… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116826 | MEDIUM | 6.8 | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::dow… |
T1190
T1203
|
|
2026-10-27 |