CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115975 | HIGH | 7.1 | Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to cr… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114697 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114695 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114694 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114179 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114178 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-112869 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-112844 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-113673 | HIGH | 7.2 | The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined tex… |
T1190
T1059
+1
|
|
2026-10-24 |
| CVE-2026-112207 | HIGH | 7.1 | The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link be… |
T1190
T1059
+1
|
|
2026-10-24 |
| CVE-2026-115807 | HIGH | 7.1 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugi… |
T1068
T1134
|
|
2026-10-24 |
| CVE-2026-115938 | HIGH | 8.8 | Craft CMS allows any authenticated control panel user to submit an element-search condition whose el… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115937 | HIGH | 7.5 | The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifi… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115935 | HIGH | 8.8 | The app/process-api-response-headers action accepts fake Craft API response headers from any authent… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115895 | HIGH | 8.8 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. From… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115887 | HIGH | 7.5 | GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe GraphQL schema… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-65825 | HIGH | 7.5 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking pl… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-65824 | HIGH | 7.4 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking pl… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-58202 | HIGH | 8.3 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking pl… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-115778 | HIGH | 7.5 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.1… |
T1078
T1548
|
|
2026-10-23 |