CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116409 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-115967 | HIGH | 8.8 | Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number al… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115965 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-115964 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-115963 | HIGH | 7.1 | Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-strea… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115962 | MEDIUM | 4.3 | Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.Thi… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-115942 | NONE | — | A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115611 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115599 | HIGH | 7.5 | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115592 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-114230 | NONE | — | When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-114193 | HIGH | 7.5 | Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exploiting In… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-112827 | HIGH | 7.1 | Missing Authorization vulnerability in VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce h… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-105042 | NONE | — | A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and c… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-105031 | NONE | — | When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn_tls_confi… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-91153 | MEDIUM | 5.3 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin fo… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-91152 | MEDIUM | 6.1 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin fo… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-88941 | MEDIUM | 5.2 | Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Ce… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118192 | MEDIUM | 6.5 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerabl… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-117611 | NONE | — | Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Cert… |
T1190
T1203
|
|
2026-10-29 |