CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111966 | MEDIUM | 6.8 | The User Profile Builder WordPress plugin before 4.0.5 does not sanitise and escape one of its shor… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-111738 | MEDIUM | 5.5 | The Speed Optimizer WordPress plugin before 7.8.5 does not verify network-level privilege before ap… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-109935 | MEDIUM | 5.3 | The Otter Blocks WordPress plugin before 3.2.8 does not enforce its block visibility conditions whe… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-109934 | MEDIUM | 5.3 | The Otter Blocks WordPress plugin before 3.2.8 does not correctly determine whether a post is publi… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-109933 | MEDIUM | 6.8 | The Otter Blocks WordPress plugin before 3.2.8 does not properly sanitize and escape user-supplied … |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-86020 | MEDIUM | 4.6 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-59188 | MEDIUM | 5.4 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-90458 | MEDIUM | 5.4 | OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts f… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-89419 | MEDIUM | 5.0 | OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node v… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-54631 | MEDIUM | 6.3 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115638 | MEDIUM | 4.3 | OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very … |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115537 | MEDIUM | 4.3 | A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d4… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115536 | MEDIUM | 4.3 | A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115485 | MEDIUM | 6.3 | A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-115534 | MEDIUM | 4.3 | A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d4… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-96616 | MEDIUM | 6.5 | Authentication tokens issued by the E3's web management interface on login are given an expiration t… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-115424 | MEDIUM | 5.5 | A flaw was found in the OpenShift client oc. When extracting container image layers with oc image ex… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115221 | MEDIUM | 5.4 | A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retriev… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114620 | MEDIUM | 5.4 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114619 | MEDIUM | 4.6 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDImp… |
T1190
T1203
|
|
2026-10-22 |