{"items":[{"id":"CVE-2026-121263","published":"2026-11-03T17:15:08.482Z","updated":"2026-11-03T22:40:59.859Z","title":"phpMyAdmin MoTranslator Loader.php getTranslator path traversal","severity":"MEDIUM","score":5.3,"vendor":"phpMyAdmin","product":"MoTranslator","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2026-121262","published":"2026-11-03T17:00:16.727Z","updated":"2026-11-03T17:00:16.727Z","title":"phpMyAdmin SQL-Parser ExplainStatement.php parse type conversion","severity":"MEDIUM","score":6.9,"vendor":"phpMyAdmin","product":"SQL-Parser","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2026-121261","published":"2026-11-03T16:30:15.391Z","updated":"2026-11-03T16:30:15.391Z","title":"phpMyAdmin ShapeFile SHP File loadFromFile infinite loop","severity":"MEDIUM","score":5.3,"vendor":"phpMyAdmin","product":"ShapeFile","kev":false,"epss":0.00293,"kevAdded":null},{"id":"CVE-2026-119563","published":"2026-10-30T11:31:11.051Z","updated":"2026-11-05T21:21:22.984Z","title":"phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name","severity":"MEDIUM","score":5.1,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00203,"kevAdded":null},{"id":"CVE-2026-119562","published":"2026-10-30T11:31:10.368Z","updated":"2026-11-04T22:19:33.677Z","title":"phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute","severity":"LOW","score":2.3,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00249,"kevAdded":null},{"id":"CVE-2026-119561","published":"2026-10-30T11:31:09.654Z","updated":"2026-10-30T16:21:29.456Z","title":"phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer","severity":"HIGH","score":7.6,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2026-119429","published":"2026-10-30T11:30:57.953Z","updated":"2026-10-30T15:54:53.572Z","title":"phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set","severity":"MEDIUM","score":5.3,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2026-119428","published":"2026-10-30T11:30:57.237Z","updated":"2026-11-05T21:17:53.977Z","title":"phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup Disabled","severity":"MEDIUM","score":6.3,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2026-119427","published":"2026-10-30T11:30:56.522Z","updated":"2026-11-04T15:07:12.105Z","title":"phpMyAdmin through 5.2.3 SQL Injection via Designer saveSetting","severity":"LOW","score":2.3,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2026-119426","published":"2026-10-30T11:30:55.817Z","updated":"2026-10-30T16:06:24.241Z","title":"phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sql","severity":"HIGH","score":7.7,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00351,"kevAdded":null},{"id":"CVE-2025-24530","published":"2025-01-23T00:00:00.000Z","updated":"2025-11-03T19:44:51.350Z","title":"An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted table or database name…","severity":"MEDIUM","score":6.4,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00409,"kevAdded":null},{"id":"CVE-2025-24529","published":"2025-01-23T00:00:00.000Z","updated":"2025-11-03T19:44:49.949Z","title":"An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the Insert tab.","severity":"MEDIUM","score":6.4,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00399,"kevAdded":null},{"id":"CVE-2022-0813","published":"2022-03-09T14:59:28.954Z","updated":"2024-09-16T23:51:38.854Z","title":"PhpMyAdmin exposure of sensitive information","severity":"MEDIUM","score":5.3,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.01296,"kevAdded":null}]}