CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116825 | MEDIUM | 6.5 | YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116824 | MEDIUM | 6.1 | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-116823 | MEDIUM | 6.1 | YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthentic… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-116822 | MEDIUM | 5.3 | YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthe… |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-116821 | MEDIUM | 6.5 | YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which interpola… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116820 | MEDIUM | 5.3 | YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthe… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-116817 | MEDIUM | 6.5 | OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated a… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-116815 | MEDIUM | 4.3 | OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116814 | MEDIUM | 6.5 | OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connectio… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116813 | MEDIUM | 6.5 | OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion th… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-116812 | MEDIUM | 6.5 | OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.servi… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-116810 | MEDIUM | 5.3 | OpenPanel before 3.0.0 contains a missing authorization vulnerability that allows unauthenticated at… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-116809 | MEDIUM | 5.3 | OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedu… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-116807 | MEDIUM | 6.5 | OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to by… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-116806 | MEDIUM | 5.4 | OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116805 | MEDIUM | 4.3 | OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level proje… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116804 | MEDIUM | 6.1 | DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116803 | MEDIUM | 6.1 | DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116802 | MEDIUM | 6.1 | DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypas… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-116801 | MEDIUM | 4.3 | Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object refe… |
T1190
T1203
|
|
2026-10-27 |