CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118030 | MEDIUM | 4.2 | A flaw was found in the HOTP authentication mechanism of the keycloak-services component, which prov… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-117859 | MEDIUM | 5.4 | A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services com… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-117688 | MEDIUM | 5.3 | A flaw was found in the client registration component of Keycloak, an open-source identity and acces… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-117627 | MEDIUM | 5.4 | A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. W… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-117548 | MEDIUM | 6.5 | A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-93293 | MEDIUM | 6.4 | The Password Protected plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bun… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-89216 | HIGH | 8.6 | The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter before us… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-88928 | MEDIUM | 6.5 | The PAYCOMET for WooCommerce WordPress plugin before 5.46 does not verify the cryptographic signatur… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-86794 | HIGH | 8.8 | The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks when … |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-85007 | LOW | 3.8 | The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability check on i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-78396 | MEDIUM | 5.3 | The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-78395 | MEDIUM | 5.3 | The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login r… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-19610 | MEDIUM | 6.5 | A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to J… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-15564 | HIGH | 7.4 | Wildfly's IIOP listener may permit deserialization of input streams before authentication is perform… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118905 | HIGH | 7.0 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js version… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115302 | MEDIUM | 5.3 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not restrict access to an AJAX ac… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-115301 | HIGH | 7.2 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not sandbox the template engine u… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-115300 | MEDIUM | 4.3 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not validate a CSRF token or requ… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115299 | MEDIUM | 5.4 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not verify a CSRF nonce before sa… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115282 | MEDIUM | 5.3 | The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not perform an authorization check be… |
T1078
T1548
|
|
2026-10-29 |