CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-45145 | HIGH | 7.5 | Chamilo LMS is an open-source learning management system. Prior to 2.0.1, `public/main/inc/lib/caree… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-45144 | HIGH | 8.9 | Chamilo LMS is an open-source learning management system. From 2.0.0 until 2.0.1, `GET /user/{userna… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119662 | HIGH | 8.8 | Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent net… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119656 | HIGH | 7.5 | CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerability in the a… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119655 | HIGH | 7.5 | CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Good/GetGo… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119654 | HIGH | 8.8 | DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticate… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119649 | HIGH | 7.1 | Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryServ… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2010-20125 | HIGH | 7.5 | DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remo… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-91914 | HIGH | 7.1 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing v… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-91913 | HIGH | 8.8 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-91912 | HIGH | 7.3 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-86715 | HIGH | 7.1 | Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Indus… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119578 | HIGH | 7.8 | MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119572 | HIGH | 8.7 | Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kuberne… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119528 | HIGH | 7.8 | A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destinati… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-112347 | HIGH | 7.6 | Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-91917 | HIGH | 8.0 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerabi… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118992 | HIGH | 8.4 | CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-111503 | HIGH | 7.1 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special … |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119586 | HIGH | 7.8 | SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover … |
T1190
T1005
+1
|
|
2026-10-30 |