CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116008 | MEDIUM | 4.3 | DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController::upda… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115998 | MEDIUM | 4.3 | IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findin… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115994 | MEDIUM | 5.4 | BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker m… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114705 | MEDIUM | 6.5 | Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploi… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114194 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115993 | MEDIUM | 6.8 | Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could… |
T1190
T1059
+1
|
|
2026-10-24 |
| CVE-2026-114693 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114190 | MEDIUM | 5.9 | Insertion of Sensitive Information Into Sent Data vulnerability in Hai Zheng / Lite Speed Cache Lite… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-110892 | MEDIUM | 6.5 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrec… |
T1190
T1059
+1
|
|
2026-10-24 |
| CVE-2026-115803 | MEDIUM | 4.3 | A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServlet… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115802 | MEDIUM | 4.3 | A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train o… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-108013 | MEDIUM | 6.8 | BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/1… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-97353 | MEDIUM | 5.4 | The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or owne… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-97352 | MEDIUM | 4.3 | The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check … |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-87835 | MEDIUM | 6.5 | The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a vis… |
T1078
T1548
|
|
2026-10-24 |
| CVE-2026-114429 | MEDIUM | 6.8 | The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotsp… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-113493 | MEDIUM | 6.8 | The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map short… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-113492 | MEDIUM | 5.3 | The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password che… |
T1078
T1548
|
|
2026-10-24 |
| CVE-2026-113491 | MEDIUM | 6.4 | The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-113490 | MEDIUM | 5.3 | The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check whe… |
T1078
T1548
|
|
2026-10-24 |