CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116046 | MEDIUM | 5.3 | A flaw has been found in eventcatalog sdk up to 2.29.0. This vulnerability affects the function getC… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116045 | MEDIUM | 4.3 | A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_re… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-94295 | MEDIUM | 5.3 | The Chikkili- Google Pay India for Woocommerce WordPress plugin through 1.0.6 does not verify that a… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116044 | MEDIUM | 6.3 | A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by thi… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-114740 | MEDIUM | 4.9 | The WPVR WordPress plugin before 9.1.3 does not correctly check user capabilities when creating a t… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-111980 | MEDIUM | 5.5 | The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capabili… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-111979 | MEDIUM | 6.8 | The GiveWP WordPress plugin before 4.19.0.1 does not properly sanitise and escape one of its donati… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-111978 | MEDIUM | 6.0 | The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename bef… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-111976 | MEDIUM | 5.3 | The GiveWP WordPress plugin before 4.19.0.1 does not perform any status or capability check when re… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-110285 | MEDIUM | 5.3 | The WP Stripe Checkout WordPress plugin before 1.2.2.62 does not verify the Stripe webhook signature… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-115997 | MEDIUM | 6.3 | A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of … |
T1190
T1005
+1
|
|
2026-10-25 |
| CVE-2026-115982 | MEDIUM | 4.3 | A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_r… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115972 | MEDIUM | 5.3 | A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerabil… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115971 | MEDIUM | 5.3 | A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the f… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114192 | MEDIUM | 6.5 | Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting I… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116020 | MEDIUM | 5.4 | BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController t… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116018 | MEDIUM | 4.3 | ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116017 | MEDIUM | 4.3 | Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the … |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116015 | MEDIUM | 4.3 | yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall t… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-116010 | MEDIUM | 4.3 | RosarioSIS before 12.9.1 contains a missing authorization vulnerability that allows authenticated te… |
T1190
T1203
|
|
2026-10-24 |