CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115194 | MEDIUM | 6.5 | A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through t… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116263 | MEDIUM | 4.6 | A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the functio… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116262 | MEDIUM | 5.4 | A vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the function w… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-115720 | MEDIUM | 5.0 | Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py … |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115718 | MEDIUM | 4.3 | Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the imp… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-105947 | MEDIUM | 6.5 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Inno… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-89209 | MEDIUM | 6.8 | A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), M… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-116259 | MEDIUM | 5.3 | A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability affects the … |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-116258 | MEDIUM | 6.3 | A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the … |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-115961 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115960 | MEDIUM | 4.3 | Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows … |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-115959 | MEDIUM | 5.3 | Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows … |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-115956 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115955 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115954 | MEDIUM | 5.4 | Missing Authorization vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Exploiting Incorrect… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115953 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115951 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115950 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115595 | MEDIUM | 5.3 | Missing Authorization vulnerability in Supsystic Contact Form by Supsystic contact-form-by-supsystic… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115594 | MEDIUM | 6.5 | Insertion of Sensitive Information Into Sent Data vulnerability in David Lingren Media LIbrary Assis… |
T1190
T1203
|
|
2026-10-26 |