This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

All entries, newest first. Data as of 8 November 2026.

Look up any CVE by ID

9783 entries

BDVDB IDCVE IDTitleVendorSeverityPublished
BDVDB-2026-401819CVE-2026-97195Secure Custom Fields < 6.9.8 - Admin+ Stored XSS via HTML Attribute Name Injection into Field DefinitionNone
BDVDB-2026-401818CVE-2026-97194Secure Custom Fields < 6.9.8 - Contributor+ Unpublished Post Title and Status Disclosure via Relational FieldsNone
BDVDB-2026-401817CVE-2026-97193Secure Custom Fields < 6.9.8 - Contributor+ Relationship Field Update on Arbitrary Objects via IDORNone
BDVDB-2026-401816CVE-2026-97192Secure Custom Fields < 6.9.8 - Contributor+ Admin-Restricted Custom Field Update via Post Save PathNone
BDVDB-2026-401815CVE-2026-96963Pie Register <= 3.8.4.15 - Contributor+ Invitation Code ModificationNone
BDVDB-2026-401814CVE-2026-96961Pie Register <= 3.8.4.15 - Unauthenticated Plugin Settings Reset and Redirect Data DestructionNone
BDVDB-2026-401813CVE-2026-85344FV Player < 7.5.57.7212 - Subscriber+ Bulk Post Modification via Missing AuthorizationNone
BDVDB-2026-401812CVE-2026-61987WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.8.1 - Cross Site Scripting (XSS) vulnerabilityWC LoversMedium
BDVDB-2026-402052CVE-2026-124553BabelDOC from 0.3.61 before 0.7.0 Denial of Service via ToUnicode CMap Parsingfunstory-aiHigh
BDVDB-2026-402051CVE-2026-124552Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgiwebminMedium
BDVDB-2026-402050CVE-2026-124551ClassroomIO through 1.0.0 Cross-Organization Course Disclosure via Clone EndpointclassroomioMedium
BDVDB-2026-402049CVE-2026-124494SunEditor before 3.4.0 Stored XSS via &colon; Entity Sanitizer BypassJiHong88Critical
BDVDB-2026-402048CVE-2026-124493SunEditor before 3.4.0 Stored XSS via DocumentType Header textContentJiHong88Critical
BDVDB-2026-402047CVE-2026-124492SunEditor before 3.4.0 Stored XSS via Link Modal Bookmark ListJiHong88High
BDVDB-2026-402046CVE-2026-124491SunEditor before 3.4.0 Stored XSS via FileUpload Plugin FilenameJiHong88Medium
BDVDB-2026-402045CVE-2026-124490OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocumentopenemrCritical
BDVDB-2026-402044CVE-2026-124489OpenEMR before 8.3.0 Broken Access Control via portal_payment.phpopenemrHigh
BDVDB-2026-402043CVE-2026-124488OpenEMR before 8.3.0 Authorization Bypass via load_form.php High-Sensitivity EncountersopenemrHigh
BDVDB-2026-402042CVE-2026-124487OpenEMR before 8.4.0 Improper Authorization in FHIR DocumentReference $docrefopenemrMedium
BDVDB-2026-402041CVE-2026-124486OpenEMR before 8.3.0 Missing Authorization in Classic Document ControlleropenemrHigh
BDVDB-2026-402040CVE-2026-124485OpenEMR before 8.3.0 Cross-Patient Document Disclosure via Onsite Documents APIopenemrMedium
BDVDB-2026-402039CVE-2026-124484OpenEMR before 8.4.0 Missing Authorization in Portal Onsite-Document APIsopenemrHigh
BDVDB-2026-402038CVE-2026-124483OpenEMR before 8.4.0 Improper Authorization via Prescription REST APIopenemrHigh
BDVDB-2026-402037CVE-2026-124482OpenEMR before 8.4.0 Cross-Patient PHI Exfiltration via SMART Patient LaunchopenemrMedium
BDVDB-2026-402036CVE-2026-124481OpenEMR before 8.4.0 Cross-Patient Payment Tampering via Rainforest Portal PaymentsopenemrMedium
BDVDB-2026-402035CVE-2026-124480OpenEMR before 8.4.0 Authorization Bypass via FHIR QuestionnaireResponse APICSRFTOKENopenemrHigh
BDVDB-2026-402034CVE-2026-124479OpenEMR before 8.4.0 Arbitrary File Read via REST Document DownloadopenemrMedium
BDVDB-2026-402033CVE-2026-124478OpenEMR before 8.3.0 Missing Authorization via addRecall in save.phpopenemrMedium
BDVDB-2026-402032CVE-2026-124477OpenEMR before 8.3.0 Missing Authorization via delete_Recall in save.phpopenemrHigh
BDVDB-2026-402031CVE-2026-124476OpenEMR before 8.3.0 IDOR via form_pid in portal/lib/paylib.phpopenemrMedium
BDVDB-2026-402030CVE-2026-124475OpenEMR before 8.3.0 IDOR via portal/lib/persist.php setting_patientopenemrHigh
BDVDB-2026-402029CVE-2026-124474MRBS before 1.12.3 Reflected XSS via error parameter of view_entry.phpmeeting-room-booking-systemMedium
BDVDB-2026-402028CVE-2026-124473OpenEMR before 8.3.0 Broken Object Authorization via SOAP Note Update APIopenemrHigh
BDVDB-2026-402027CVE-2026-124472OpenEMR before 8.3.0 Missing Authorization via sl_eob_patient_note.phpopenemrHigh
BDVDB-2026-402026CVE-2026-124471OpenEMR before 8.3.0 Missing Authorization and IDOR via sl_eob_invoice.phpopenemrHigh
BDVDB-2026-402025CVE-2026-124470OpenEMR before 8.3.0 BOLA via portal_custom_report.php Exposes Patient Problem ListsopenemrMedium
BDVDB-2026-402024CVE-2026-124469OpenEMR before 8.3.0 SQL Injection via Fee Sheet warehouse parameteropenemrCritical
BDVDB-2026-402023CVE-2026-124468OpenEMR before 8.3.0 SQL Injection via Patient Insurance and Employer REST APIopenemrHigh
BDVDB-2026-402022CVE-2026-124467OpenEMR before 8.4.0 Remote Code Execution via ESign LFI and fax uploadopenemrHigh
BDVDB-2026-402021CVE-2026-124466OpenEMR before 8.4.0 Unauthenticated SSRF via OAuth2 Client jwks_uriopenemrHigh
BDVDB-2026-402020CVE-2026-124465Trendyol kafka-konsumer 2.3.3 before 2.6.18 Denial of Service via Batch Consumer PanicTrendyolMedium
BDVDB-2026-402019CVE-2026-124464OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via QuestionnaireResponseopenemrMedium
BDVDB-2026-402018CVE-2026-124463OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print ViewopenemrHigh
BDVDB-2026-402017CVE-2026-124462OpenEMR before 8.3.0 Patient Portal IDOR via Case-Sensitive Pid ParameteropenemrMedium
BDVDB-2026-402016CVE-2026-124461OpenEMR before 8.3.0 IDOR via DICOM library/ajax/upload.php EndpointopenemrHigh
BDVDB-2026-402015CVE-2026-124460OpenEMR before 8.3.0 IDOR in Patient Portal PortalPatientControlleropenemrMedium
BDVDB-2026-402014CVE-2026-124459OpenEMR before 8.3.0 Cross-Patient IDOR via Encounter Form Viewers and Save HandlersopenemrHigh
BDVDB-2026-402013CVE-2026-124458OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via Person EndpointopenemrMedium
BDVDB-2026-402012CVE-2026-124457OpenEMR before 8.3.0 Path Traversal via sl_eob_process.php eranameopenemrHigh
BDVDB-2026-402011CVE-2026-124456OpenEMR before 8.3.0 Missing Authorization and IDOR in Prior-Authorizations ModuleopenemrHigh