CVE Vulnerability Database
Search and browse 425,067 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-82458 | HIGH | 8.7 | — | Oct 2, 2026 | Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apach... |
| CVE-2026-61373 | HIGH | 8.7 | 0.4% | Oct 2, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer. This... |
| CVE-2026-104609 | HIGH | 7.3 | 0.3% | Oct 2, 2026 | A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61... |
| CVE-2026-104473 | MEDIUM | 6.1 | 0.2% | Oct 2, 2026 | YesWiki before 4.5.3 contains multiple reflected cross-site scripting vulnerabilities that allow remote attackers to inj... |
| CVE-2026-104472 | HIGH | 7.5 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a missing authorization vulnerability in the attachment download handler that allows unaut... |
| CVE-2026-104471 | HIGH | 7.2 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote... |
| CVE-2026-104470 | MEDIUM | 5 | 0.2% | Oct 2, 2026 | YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows page editors to make the server fe... |
| CVE-2026-104469 | MEDIUM | 6.8 | 0.2% | Oct 2, 2026 | YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions be... |
| CVE-2026-104468 | MEDIUM | 4.8 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains an insufficient session expiration vulnerability that allows attackers to reuse old passwo... |
| CVE-2026-104467 | HIGH | 8.1 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains an authorization bypass vulnerability in ApiService::isAuthorized() that allows unauthenti... |
| CVE-2026-104466 | MEDIUM | 5.4 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a stored cross-site scripting vulnerability in formatters/wakka.php that allows users who ... |
| CVE-2026-104465 | MEDIUM | 6.1 | 0.2% | Oct 2, 2026 | YesWiki before 4.6.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in... |
| CVE-2026-104464 | HIGH | 8.6 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make ... |
| CVE-2026-104463 | HIGH | 7 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigg... |
| CVE-2026-104462 | HIGH | 7.5 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unesca... |
| CVE-2026-104461 | MEDIUM | 5.4 | 0.2% | Oct 2, 2026 | YesWiki before 4.6.7 contains a stored cross-site scripting vulnerability in the Bazar FileField, which validates only t... |
| CVE-2026-104460 | HIGH | 7.5 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the {{newtextsearch}} action because Bazar list opt... |
| CVE-2026-104459 | MEDIUM | 6.5 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a server-side request forgery vulnerability in WebfingerService that allows unauthenticate... |
| CVE-2026-104458 | MEDIUM | 6.5 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a server-side request forgery vulnerability in validateKeyIdUrl() that allows unauthentica... |
| CVE-2026-104457 | HIGH | 8.6 | 0.3% | Oct 2, 2026 | YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar filtertags action, which wraps unescaped filte... |
| CVE-2026-104456 | HIGH | 7.6 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a second-order SQL injection vulnerability in AclService::updateRequestWithACL, where a st... |
| CVE-2026-104455 | MEDIUM | 5.3 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains an access control bypass vulnerability that allows unauthenticated attackers to read restr... |
| CVE-2026-104454 | MEDIUM | 5.3 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains an algorithmic-complexity denial of service in the wakka.php formatter due to an O(n^2) ma... |
| CVE-2026-104453 | MEDIUM | 5.4 | 0.1% | Oct 2, 2026 | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the admintag action that allows attackers to... |
| CVE-2026-104452 | MEDIUM | 5.4 | — | Oct 2, 2026 | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the filemanager page handler, which deletes ... |