CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115411 | MEDIUM | 5.0 | crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler en… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115400 | MEDIUM | 4.4 | crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with … |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-115249 | MEDIUM | 4.6 | A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07e… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115248 | MEDIUM | 5.4 | A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a14462… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-115247 | MEDIUM | 4.3 | A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9e… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-13411 | MEDIUM | 4.3 | Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import c… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115334 | MEDIUM | 6.8 | Lotus through 0.10.2 contains an authorization bypass vulnerability in ChangeUserOrganizationView.po… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115333 | MEDIUM | 5.9 | Lotus through 0.10.2 contains an improper authentication vulnerability in the Go event ingestion mid… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-115329 | MEDIUM | 5.9 | Lotus through 0.10.2 contains an insecure direct object reference vulnerability in SubscriptionViewS… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115327 | MEDIUM | 5.3 | libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rp… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115326 | MEDIUM | 5.4 | QloApps through 1.7.0 contains an insecure direct object reference vulnerability in OrderDetailContr… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115322 | MEDIUM | 4.3 | Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSe… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115321 | MEDIUM | 4.3 | Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment hand… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-115207 | MEDIUM | 5.5 | A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114665 | MEDIUM | 6.5 | Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /dep… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-112842 | MEDIUM | 6.5 | Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscription… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2024-58394 | MEDIUM | 6.1 | Retool before 3.88.0 contains a cross-site scripting vulnerability that allows unauthenticated attac… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2023-54413 | MEDIUM | 6.1 | WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vu… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2022-51025 | MEDIUM | 6.5 | Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows au… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2020-37284 | MEDIUM | 6.1 | Sickbeard through build-507 contains a reflected cross-site scripting vulnerability that allows unau… |
T1078
T1548
|
|
2026-10-22 |