CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-42701 | HIGH | 7.2 | Shop manager PHP Object Injection in YayMail <= 4.4.6 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-42694 | MEDIUM | 4.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Theme… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-42692 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-42690 | MEDIUM | 5.4 | Subscriber Broken Access Control in LearnPress <= 4.4.10 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-27394 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Eventer <= 0.1.1 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-20942 | MEDIUM | 4.3 | Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an un… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-18894 | MEDIUM | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored P… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119145 | CRITICAL | 9.9 | Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certa… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-119144 | HIGH | 8.8 | Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection v… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119143 | MEDIUM | 4.8 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability th… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-119142 | MEDIUM | 4.8 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability wh… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119141 | MEDIUM | 5.3 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability th… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119140 | MEDIUM | 4.8 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability th… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119139 | MEDIUM | 4.8 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::F… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119138 | MEDIUM | 4.8 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability th… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119137 | MEDIUM | 5.3 | Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a stack overflow vulnerability that … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-119136 | MEDIUM | 4.8 | Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mi… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119135 | MEDIUM | 4.8 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119134 | MEDIUM | 6.2 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 caps component-model resourc… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-119133 | LOW | 2.6 | Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw in VMCont… |
T1190
T1203
|
|
2026-10-29 |