CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-113582 | HIGH | 7.5 | UNSUPPORTED WHEN ASSIGNED Improper restriction of XML external entity references in Apache Abdera al… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115332 | HIGH | 8.8 | Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization … |
T1190
T1005
+1
|
|
2026-10-22 |
| CVE-2026-115331 | HIGH | 8.8 | Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization … |
T1190
T1005
+1
|
|
2026-10-22 |
| CVE-2026-115330 | HIGH | 8.8 | Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization … |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-115328 | HIGH | 8.8 | JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi() in src/server_realt… |
T1190
T1005
+1
|
|
2026-10-22 |
| CVE-2026-115325 | HIGH | 8.3 | Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115324 | HIGH | 8.1 | mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.p… |
T1190
T1005
+1
|
|
2026-10-22 |
| CVE-2026-115323 | HIGH | 7.3 | EverShop 1.2.2 before 2.2.1 contains a missing authorization vulnerability in the customer address A… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-112822 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-22 |
| CVE-2026-112820 | HIGH | 8.1 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-112313 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-111079 | HIGH | 7.4 | A flaw was found in Goose. When the terminal integration feature is enabled, the application capture… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2025-71434 | HIGH | 8.2 | Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthenticated SQL injection vulnerab… |
T1190
T1005
+1
|
|
2026-10-22 |
| CVE-2024-58396 | HIGH | 7.5 | YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability that allows unaut… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2024-58393 | HIGH | 8.2 | i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) contains an SQL injection vulnerab… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2022-51024 | HIGH | 7.5 | Kavita 0.5.2 before 0.5.4.1 contains a path traversal vulnerability that allows unauthenticated atta… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2022-51023 | HIGH | 8.2 | PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated att… |
T1190
T1005
+1
|
|
2026-10-22 |
| CVE-2022-51021 | HIGH | 8.2 | NotificationX plugin for WordPress 2.0.0 before 2.3.12 contains an unauthenticated SQL injection vul… |
T1190
T1005
+1
|
|
2026-10-22 |
| CVE-2021-48017 | HIGH | 7.5 | OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthenticated path traversa… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2021-48015 | HIGH | 7.5 | JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows re… |
T1190
T1059
+1
|
|
2026-10-22 |