CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-50000 | MEDIUM | 5.0 | SecureDrop is an open-source whistleblower submission system that media organizations can use to sec… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119466 | MEDIUM | 5.4 | Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosq… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119367 | MEDIUM | 5.4 | Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calenda… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119365 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119300 | MEDIUM | 6.5 | Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119299 | MEDIUM | 5.9 | gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in lay… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119298 | MEDIUM | 4.2 | croc is a tool that allows any two computers to simply and securely transfer files and folders. Prio… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119148 | MEDIUM | 6.5 | Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-104623 | MEDIUM | 6.3 | A security vulnerability exists in the authorization handling for the local (management) cluster she… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-62141 | MEDIUM | 5.4 | Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting In… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119721 | MEDIUM | 6.1 | Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119720 | MEDIUM | 5.5 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119715 | MEDIUM | 4.3 | NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the au… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119714 | MEDIUM | 6.5 | My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that a… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119712 | MEDIUM | 6.4 | PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_si… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119711 | MEDIUM | 5.3 | PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unaut… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119709 | MEDIUM | 5.8 | Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119708 | MEDIUM | 6.5 | abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypass in the BlobManagem… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119705 | MEDIUM | 5.3 | SerpBear before 3.1.1 contains a missing authentication vulnerability in pages/api/notify.ts that al… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119704 | MEDIUM | 6.8 | Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh, rcp.sh and jcp.sh su… |
T1190
T1203
|
|
2026-10-30 |