CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2017-20290 | MEDIUM | 6.1 | Discourse 1.9.0.beta2 before 1.9.0.beta13 contains a reflected cross-site scripting vulnerability th… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2017-20288 | MEDIUM | 6.1 | QCubed 2.2.0 through 3.1.1 contains a reflected cross-site scripting vulnerability that allows unaut… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114348 | MEDIUM | 5.3 | webpack-dev-server is a development server that provides live reloading for webpack projects. In ver… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114703 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114702 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114701 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114700 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114699 | MEDIUM | 5.3 | Missing Authorization vulnerability in yoomoney ЮKassa для WooCommerce yookassa allows Exploiting In… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114698 | MEDIUM | 5.4 | Authorization Bypass Through User-Controlled Key vulnerability in myCred myCred mycred allows Exploi… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114696 | MEDIUM | 5.3 | Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-rest… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114195 | MEDIUM | 5.3 | Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP … |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-112845 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-112311 | MEDIUM | 6.5 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ACF … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-112218 | MEDIUM | 5.3 | Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Inc… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-111842 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Ex… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-110894 | MEDIUM | 5.3 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrec… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-110893 | MEDIUM | 5.3 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrec… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114460 | MEDIUM | 5.3 | A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request bod… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114458 | MEDIUM | 5.9 | A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) … |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114184 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-22 |