CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-84727 | MEDIUM | 5.4 | Use-after-free in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platform… | — |
|
2026-10-21 |
| CVE-2026-114407 | MEDIUM | 6.1 | e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthent… | — |
|
2026-10-21 |
| CVE-2026-114404 | MEDIUM | 6.1 | PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer tha… | — |
|
2026-10-21 |
| CVE-2026-114402 | MEDIUM | 4.3 | Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsC… | — |
|
2026-10-21 |
| CVE-2026-114401 | MEDIUM | 5.3 | Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthentic… | — |
|
2026-10-21 |
| CVE-2026-114400 | MEDIUM | 5.9 | Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated a… | — |
|
2026-10-21 |
| CVE-2026-114399 | MEDIUM | 6.5 | Trudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete … | — |
|
2026-10-21 |
| CVE-2026-114398 | MEDIUM | 5.4 | Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authentica… | — |
|
2026-10-21 |
| CVE-2026-114395 | MEDIUM | 4.3 | Trudesk through 1.2.11 contains an authorization bypass vulnerability in apiMessages.send that allow… | — |
|
2026-10-21 |
| CVE-2026-114394 | MEDIUM | 4.3 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated user… | — |
|
2026-10-21 |
| CVE-2026-114393 | MEDIUM | 4.3 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated … | — |
|
2026-10-21 |
| CVE-2026-114392 | MEDIUM | 4.3 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated user… | — |
|
2026-10-21 |
| CVE-2026-114390 | MEDIUM | 5.3 | Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a missing authorization vulnerability in l… | — |
|
2026-10-21 |
| CVE-2026-114389 | MEDIUM | 4.3 | Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing authorization vulnerability in A… | — |
|
2026-10-21 |
| CVE-2026-114388 | MEDIUM | 5.3 | Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 contain a missing access control… | — |
|
2026-10-21 |
| CVE-2026-114386 | MEDIUM | 4.8 | Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls… | — |
|
2026-10-21 |
| CVE-2026-114248 | MEDIUM | 5.3 | A security vulnerability has been detected in dhikshitha29 Insurance-Management-System 91de5edda5baa… | — |
|
2026-10-21 |
| CVE-2026-114120 | MEDIUM | 5.4 | SchedulePress before 5.3.5 contains a missing authorization vulnerability that allows authenticated … | — |
|
2026-10-21 |
| CVE-2026-111849 | MEDIUM | 5.3 | Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploi… | — |
|
2026-10-21 |
| CVE-2026-96405 | MEDIUM | 5.3 | NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each … | — |
|
2026-10-21 |