CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119598 | MEDIUM | 4.3 | Miaomiaowu before 0.9.3 contains an insecure direct object reference vulnerability in /api/user/prox… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119596 | MEDIUM | 4.3 | UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show t… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119577 | MEDIUM | 6.8 | ArcadeDB before 26.10.2 contains an improper authorization vulnerability that allows revoked users t… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119576 | MEDIUM | 4.3 | ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that allows user… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119575 | MEDIUM | 6.5 | ArcadeDB from 26.8.1 before 26.10.2 contains a server-side request forgery vulnerability that allows… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119574 | MEDIUM | 5.9 | Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unau… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119573 | MEDIUM | 4.4 | Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provid… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119569 | MEDIUM | 5.3 | Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerabi… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119542 | MEDIUM | 4.3 | A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested predicate… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-115683 | MEDIUM | 6.8 | A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning pa… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-112348 | MEDIUM | 6.5 | Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauth… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-111500 | MEDIUM | 5.4 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical … |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-111499 | MEDIUM | 5.5 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-111498 | MEDIUM | 4.7 | OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability.… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-112374 | MEDIUM | 4.3 | FOSSBilling before 0.8.9 contains a Cross-Site Request Forgery vulnerability in the staff guest logi… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-111502 | MEDIUM | 4.3 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently Protected Credential… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-111501 | MEDIUM | 5.4 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive A… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119591 | MEDIUM | 5.5 | SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that all… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-119566 | MEDIUM | 4.8 | Prometheus through 3.15.1 contains a credential leak vulnerability that allows attackers to capture … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119565 | MEDIUM | 4.3 | Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_… |
T1190
T1203
|
|
2026-10-30 |