CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115786 | MEDIUM | 6.5 | A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115785 | MEDIUM | 4.3 | An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collabora… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115754 | MEDIUM | 4.7 | serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scripting vulnerability that allo… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115480 | MEDIUM | 5.3 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, … |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115479 | MEDIUM | 5.3 | baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, … |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-114623 | MEDIUM | 6.5 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, … |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-55422 | MEDIUM | 4.6 | conda-forge is a GitHub organization containing repositories of conda recipes. In commits 85748ad236… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-55190 | MEDIUM | 6.5 | Event Schedule is an open-source platform to share events, sell tickets and bring communities togeth… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115752 | MEDIUM | 4.2 | Signal K Server from 2.28.0-beta.2 before 2.34.0 contains a server-side request forgery vulnerabilit… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115729 | MEDIUM | 6.8 | @pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that all… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-94263 | MEDIUM | 4.8 | The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-115725 | MEDIUM | 4.2 | Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agen… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115722 | MEDIUM | 6.1 | RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_prop… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-111965 | MEDIUM | 4.3 | The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-112825 | MEDIUM | 6.5 | Missing Authorization vulnerability in Magepeople inc. Car Rental Manager car-rental-manager allows … |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-112821 | MEDIUM | 6.5 | Missing Authorization vulnerability in Knit Pay Knit Pay knit-pay allows Exploiting Incorrectly Conf… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-63243 | MEDIUM | 4.3 | An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound B… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-94264 | MEDIUM | 6.8 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extend… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-113472 | MEDIUM | 5.4 | The Depicter — Popup & Slider Builder WordPress plugin before 4.8.2 does not properly validate uploa… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-112219 | MEDIUM | 4.9 | The Download Monitor WordPress plugin before 5.3.5 does not correctly restrict management of the lis… |
T1078
T1548
|
|
2026-10-23 |