CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119703 | MEDIUM | 4.8 | xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in WebSocketServe… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119702 | MEDIUM | 6.5 | WPGraphQL before 2.24.1 contains a missing authorization vulnerability in the createComment mutation… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119701 | MEDIUM | 5.3 | WPGraphQL before 2.24.1 contains a missing rate limiting vulnerability that allows unauthenticated a… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119700 | MEDIUM | 5.3 | WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119699 | MEDIUM | 5.3 | WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119479 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Croco… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119369 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119291 | MEDIUM | 5.5 | Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.4.0, @zuke/cli use… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-116407 | MEDIUM | 5.4 | Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploit… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-104063 | MEDIUM | 6.1 | Scribus before 1.6.7 contains an out-of-bounds read vulnerability in the Mac PICT image loader and i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-65444 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-48164 | MEDIUM | 4.7 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-46499 | MEDIUM | 4.3 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-45141 | MEDIUM | 6.5 | Chamilo LMS is an open-source learning management system. Prior to 2.0.1, the `add`, `delete_gradebo… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-44344 | MEDIUM | 6.6 | Chamilo LMS is an open-source learning management system. In the 1.x line before 1.11.40, and the 2.… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119665 | MEDIUM | 6.3 | WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119664 | MEDIUM | 4.3 | Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the c… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119663 | MEDIUM | 4.3 | Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cl… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119661 | MEDIUM | 4.2 | ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteE… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119659 | MEDIUM | 5.4 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated user… |
T1190
T1203
|
|
2026-10-30 |