CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-120007 | MEDIUM | 6.5 | NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthentica… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119842 | MEDIUM | 6.5 | A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a special… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119729 | MEDIUM | 6.5 | A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119728 | MEDIUM | 5.5 | A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119727 | MEDIUM | 6.5 | A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119526 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. Th… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119117 | MEDIUM | 6.5 | Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java befor… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118090 | HIGH | 8.8 | Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118089 | HIGH | 7.2 | Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118086 | HIGH | 8.8 | Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions. |
T1068
T1134
|
|
2026-10-30 |
| CVE-2026-116862 | HIGH | 7.5 | Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-116861 | HIGH | 7.5 | Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-116854 | MEDIUM | 6.5 | Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116853 | MEDIUM | 6.5 | Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-116852 | CRITICAL | 9.1 | Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions. |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-116851 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions. |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-116847 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-116410 | MEDIUM | 6.5 | Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-116405 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-116401 | HIGH | 7.5 | Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions. |
T1078
T1548
|
|
2026-10-30 |