Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Low2.1A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.Vuln · CVE-2026-111992 · NIST NVDOpen the advisoryOct 18, 2026
Medium5.5A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1.Vuln · CVE-2026-111990 · CVE.org · NIST NVDOpen the advisoryOct 18, 2026
Low2.1A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0.Vuln · CVE-2026-111942 · CVE.org · NIST NVDOpen the advisoryOct 18, 2026
Low2.1A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571.Vuln · CVE-2026-111877 · CVE.org · NIST NVDOpen the advisoryOct 18, 2026
Low2.0A vulnerability has been found in David-Crty Databasement up to 1.8.1.Vuln · CVE-2026-111875 · CVE.org · NIST NVDOpen the advisoryOct 18, 2026
Low2.9A flaw has been found in OpenCATS 0.10.0.Fix · CVE-2026-111874 · CVE.org · NIST NVDOpen the advisoryOct 18, 2026
Medium5.5A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.Vuln · CVE-2026-111873 · CVE.org · NIST NVDOpen the advisoryOct 18, 2026
Medium5.5A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.Vuln · CVE-2026-111872 · CVE.org · NIST NVDOpen the advisoryOct 18, 2026
Medium5.5A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.Vuln · CVE-2026-111871 · CVE.org · NIST NVDOpen the advisoryOct 18, 2026
Medium5.5A security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.Vuln · CVE-2026-111870 · CVE.org · NIST NVDOpen the advisoryOct 18, 2026
Medium6.9Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omi…Vuln · CVE-2026-111916 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026
High7.1Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory_data.php that allows authenticated users to bypass the…Vuln · CVE-2026-111914 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026
Medium5.3Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists despite export restrictions by requesting mode=pdfl.Vuln · CVE-2026-111913 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026
High7.1phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in attachment.php that allows attackers to download attachments…Vuln · CVE-2026-111910 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026
High7.2phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated non-superadmin users with delete_user permission…Vuln · CVE-2026-111909 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026
High8.7phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authorization vulnerability in the PUT /api/v3.1/faq/update endpoint, whic…Vuln · CVE-2026-111908 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026
High7.1phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database endpoint, which executes database migrations wit…Vuln · CVE-2026-111907 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026
High7.1phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endp…Vuln · CVE-2026-111906 · CVE.org · NIST NVD · ElasticsearchOpen the advisoryOct 17, 2026
High7.0phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object reference vulnerability in GET /admin/api/user/data/{userId}, which re…Vuln · CVE-2026-111905 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026
Medium6.9phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows unauthenticated attackers to read hidden open questions due to an i…Vuln · CVE-2026-111904 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026
Medium5.1phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows users with FAQ_EDIT permission to bypass saniti…Vuln · CVE-2026-111903 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026
Medium6.9phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in isFaqAccessibleForUser() that treats a missing FAQ translation as visible to u…Vuln · CVE-2026-111902 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026
High8.7phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticated faqs and search API endpoints.Vuln · CVE-2026-111901 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026
Medium5.3phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization vulnerability in attachment.php that fails to verify whether an attachment's…Vuln · CVE-2026-111900 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026
High7.7phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to take over local accounts by matching preferred_use…Vuln · CVE-2026-111898 · CVE.org · NIST NVDOpen the advisoryOct 17, 2026