CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119658 | MEDIUM | 4.3 | PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenti… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119657 | MEDIUM | 5.0 | FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that a… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119653 | MEDIUM | 4.3 | Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated b… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119652 | MEDIUM | 4.3 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FriendContro… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119651 | MEDIUM | 5.4 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedControll… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119650 | MEDIUM | 5.4 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in PrivacyContr… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119648 | MEDIUM | 4.3 | Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that a… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119647 | MEDIUM | 4.3 | RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServiceImpl.se… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119646 | MEDIUM | 4.3 | Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated u… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119645 | MEDIUM | 6.5 | ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that all… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119644 | MEDIUM | 5.4 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119482 | MEDIUM | 5.3 | Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting In… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119370 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119368 | MEDIUM | 5.3 | Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calenda… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116860 | MEDIUM | 5.3 | Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Con… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2015-20130 | MEDIUM | 6.1 | Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerabil… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-91915 | MEDIUM | 6.8 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119601 | MEDIUM | 6.1 | AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119600 | MEDIUM | 4.8 | tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attac… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119599 | MEDIUM | 4.3 | AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users… |
T1068
T1134
|
|
2026-10-30 |