CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-114473 | MEDIUM | 5.0 | Incorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robot hMailServer 6.2.1 … | — |
|
2026-10-21 |
| CVE-2026-114471 | MEDIUM | 4.7 | Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServ… | — |
|
2026-10-21 |
| CVE-2026-114470 | MEDIUM | 5.3 | Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allo… | — |
|
2026-10-21 |
| CVE-2026-114253 | MEDIUM | 6.3 | A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f… | — |
|
2026-10-21 |
| CVE-2026-113787 | MEDIUM | 6.1 | odf-kit allows users to generate, fill, read, and convert OpenDocument Format files (.odt, .ods) in … | — |
|
2026-10-21 |
| CVE-2026-102485 | MEDIUM | 5.2 | Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an atta… | — |
|
2026-10-21 |
| CVE-2026-102484 | MEDIUM | 6.4 | Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker… | — |
|
2026-10-21 |
| CVE-2026-114252 | MEDIUM | 6.3 | A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8… | — |
|
2026-10-21 |
| CVE-2026-114251 | MEDIUM | 6.3 | A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8c… | — |
|
2026-10-21 |
| CVE-2026-114250 | MEDIUM | 6.3 | A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82… | — |
|
2026-10-21 |
| CVE-2026-111837 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-21 |
| CVE-2026-111835 | MEDIUM | 6.5 | Missing Authorization vulnerability in bjorntech BjornTech Swish for WooCommerce woo-swish-e-commerc… | — |
|
2026-10-21 |
| CVE-2025-60497 | MEDIUM | 5.5 | A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.… | — |
|
2026-10-21 |
| CVE-2025-60492 | MEDIUM | 5.5 | A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box befo… | — |
|
2026-10-21 |
| CVE-2026-114437 | MEDIUM | 4.8 | In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a… | — |
|
2026-10-21 |
| CVE-2024-7478 | MEDIUM | 5.8 | When a WSO2 product is configured to use an external user store, the system fails to adequately obsc… | — |
|
2026-10-21 |
| CVE-2024-6423 | MEDIUM | 4.0 | The product failed to enforce validation constraints on user-supplied input in URL parameters, allow… | — |
|
2026-10-21 |
| CVE-2024-5563 | MEDIUM | 4.8 | Due to an incomplete implementation, reCaptcha is not applied to certain authentication flows even w… | — |
|
2026-10-21 |
| CVE-2024-5139 | MEDIUM | 6.1 | The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for th… | — |
|
2026-10-21 |
| CVE-2024-4989 | MEDIUM | 5.4 | The callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allowing it to… | — |
|
2026-10-21 |