CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-61847 | NONE | — | Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior t… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-61846 | NONE | — | Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior t… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-61845 | NONE | — | Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior t… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-61840 | NONE | — | Quest Bot is an opensource Discord Bot. Prior to 1.1.9, the `image to GIF` command uses a request he… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-61586 | NONE | — | Copernik XML Factory provides secure-by-default JAXP factory creation for Java. Prior to 0.1.2, Cope… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-59978 | HIGH | 7.5 | AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the una… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-54855 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-54854 | MEDIUM | 6.3 | Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions. |
T1068
T1134
|
|
2026-10-30 |
| CVE-2026-54850 | MEDIUM | 6.5 | Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-52710 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithem… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-48201 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-46560 | HIGH | 7.5 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` auth… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-39786 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-39739 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-39738 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automatio… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-39734 | HIGH | 7.5 | Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-39732 | CRITICAL | 9.3 | Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions. |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-28160 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-27061 | MEDIUM | 6.5 | Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-120046 | MEDIUM | 5.3 | Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTo… |
T1190
T1203
|
|
2026-10-30 |