CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116284 | MEDIUM | 4.3 | A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknow… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115930 | MEDIUM | 6.8 | The MongoDB Shell (mongosh) relies on Node.js as a third-party runtime that carries its own TLS root… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-110733 | MEDIUM | 5.4 | Vulnerability in the SQL storage module of Apache SIS. When sorting a stream of features, the clause… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116516 | MEDIUM | 6.5 | Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before sli… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116492 | MEDIUM | 6.5 | Frappe CRM app before 1.89.1 contains a missing authorization vulnerability that allows authenticate… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116488 | MEDIUM | 6.8 | NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer over… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-116487 | MEDIUM | 4.6 | NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds r… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116486 | MEDIUM | 4.5 | Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class loader to… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116283 | MEDIUM | 4.3 | A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116282 | MEDIUM | 4.3 | A security flaw has been discovered in Kameleo up to 5.3.1. Affected by this issue is the function C… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116280 | MEDIUM | 5.5 | A vulnerability was determined in Kameleo up to 5.0.1.26. Affected is the function InternalControlle… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116275 | MEDIUM | 6.3 | A vulnerability was found in AllenAI AllenNLP up to 2.10.1. This impacts the function Registrable.re… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116274 | MEDIUM | 4.3 | A vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of the file ap… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116217 | MEDIUM | 6.1 | RosarioSIS before 12.9.2 contains a reflected cross-site scripting vulnerability in modules/Food_Ser… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-116216 | MEDIUM | 5.3 | MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveDat… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-116213 | MEDIUM | 4.9 | Webasyst Framework through 4.4.0 contains an arbitrary file read vulnerability in waArchiveTar::writ… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116212 | MEDIUM | 5.4 | Webasyst Framework through 4.4.0 contains a stored cross-site scripting vulnerability in the Photos … |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116210 | MEDIUM | 6.5 | Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos a… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115196 | MEDIUM | 5.4 | An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mauti… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-115195 | MEDIUM | 6.5 | A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). The endpo… |
T1190
T1059
+1
|
|
2026-10-26 |